Skip to content
OpenAdvisories
Unscored CVE-2016-2979 EUVD-2016-4052GHSA-f6v8-836h-83f7

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr…

Published Aug 29, 2017 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 113945.

Affected products

VendorProductAffectedFixed
IBM Sametime 8.5.2, 8.5.2.1, 9.0, 9.0.0.1, 9.0.1 —

References