Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-45696 EUVD-2023-49985GHSA-j75r-xrr2-rgp6

HCL Sametime is impacted by an autocomplete enabled vulnerability

Published Feb 10, 2024 · Updated Jun 3, 2025 · Assigned by HCL

Description

Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser.

Affected products

VendorProductAffectedFixed
HCL Software HCL Sametime 11.5, 11.6, 11.6 IF1, 12.0, 12.0 FP1, 12.0.1, 12.0.1 FP1 —

References