Vulnerabilities > IBM > Lotus Sametime > 8.5.2.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2013-11-09 | CVE-2013-3985 | Permissions, Privileges, and Access Controls vulnerability in IBM Lotus Sametime 8.5.2/8.5.2.1 The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable. | 2.9 |
2013-11-09 | CVE-2013-3045 | Improper Input Validation vulnerability in IBM Lotus Sametime 8.5.2/8.5.2.1 The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function. | 3.5 |
2013-11-09 | CVE-2013-3044 | Permissions, Privileges, and Access Controls vulnerability in IBM Lotus Sametime 8.5.2/8.5.2.1 The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges. | 3.5 |
2013-11-09 | CVE-2013-0537 | Permissions, Privileges, and Access Controls vulnerability in IBM Lotus Sametime 8.5.2/8.5.2.1 The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges. | 3.5 |
2013-11-08 | CVE-2013-3986 | Buffer Errors vulnerability in IBM Lotus Sametime 8.5.2/8.5.2.1 IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension crash) via a crafted Audio Visual (AV) session. | 4.3 |
2013-06-21 | CVE-2013-0534 | Credentials Management vulnerability in IBM Lotus Sametime and Sametime The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory. | 1.9 |
2013-05-02 | CVE-2013-0535 | Cross-Site Scripting vulnerability in IBM Classic Meeting Server and Lotus Sametime Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | 3.5 |
2013-04-28 | CVE-2013-0533 | Cross-Site Scripting vulnerability in IBM Lotus Sametime Cross-site scripting (XSS) vulnerability in the Sametime Links server in IBM Sametime 8.0.2 through 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | 3.5 |