Vulnerabilities > IBM

DATE CVE VULNERABILITY TITLE RISK
2017-08-29 CVE-2016-2978 Information Exposure vulnerability in IBM Sametime
IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user.
local
low complexity
ibm CWE-200
3.3
2017-08-29 CVE-2016-2976 Information Exposure vulnerability in IBM Sametime
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history.
network
low complexity
ibm CWE-200
4.3
2017-08-29 CVE-2016-2975 Cross-site Scripting vulnerability in IBM Sametime
IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-08-29 CVE-2016-2974 Information Exposure vulnerability in IBM Sametime
IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user.
local
low complexity
ibm CWE-200
3.3
2017-08-29 CVE-2016-2967 Cross-site Scripting vulnerability in IBM Sametime
IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-08-29 CVE-2016-2966 Information Exposure vulnerability in IBM Sametime
IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id.
network
low complexity
ibm CWE-200
4.3
2017-08-29 CVE-2016-2964 Information Exposure vulnerability in IBM Sametime
IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application.
network
low complexity
ibm CWE-200
5.3
2017-08-29 CVE-2016-0358 Information Exposure vulnerability in IBM Sametime
IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to.
network
low complexity
ibm CWE-200
4.3
2017-08-29 CVE-2016-2979 Cross-site Scripting vulnerability in IBM Sametime
IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-08-29 CVE-2016-2977 Improper Input Validation vulnerability in IBM Sametime
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting.
network
low complexity
ibm CWE-20
4.3