Skip to content
OpenAdvisories
Unscored CVE-2016-2975 EUVD-2016-4048GHSA-wqf5-v6gx-7c9x

IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…

Published Aug 29, 2017 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113935.

Affected products

VendorProductAffectedFixed
IBM Sametime 8.5.2, 8.5.2.1, 9.0, 9.0.0.1, 9.0.1 —

References