Vulnerabilities > IBM > Sametime

DATE CVE VULNERABILITY TITLE RISK
2017-08-29 CVE-2016-0355 Cross-Site Request Forgery (CSRF) vulnerability in IBM Sametime
IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease through the use of cross-site request forgery.
network
low complexity
ibm CWE-352
6.5
2017-08-29 CVE-2016-0354 Unrestricted Upload of File with Dangerous Type vulnerability in IBM Sametime
IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be downloaded by unsuspecting users which could be executed with user privileges.
network
low complexity
ibm CWE-434
5.5
2017-08-29 CVE-2016-2970 Information Exposure vulnerability in IBM Sametime
IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers.
network
low complexity
ibm CWE-200
4.3