Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm lotus sametime vulnerabilities and exploits
(subscribe to this query)
445
VMScore
CVE-2011-1370
The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 up to and including 8.5.2 does not enable an authentication requirement, which allows remote malicious users to read the configuration settings by examining a response me...
Ibm Lotus Sametime 7.5.1
Ibm Lotus Sametime 8.0.1
Ibm Lotus Sametime 7.5.1.2
Ibm Lotus Sametime 7.5.0.1
Ibm Lotus Sametime 8.0
Ibm Lotus Sametime 8.5.1
Ibm Lotus Sametime 8.5
Ibm Lotus Sametime 8.0.2
Ibm Lotus Sametime 7.0
Ibm Lotus Sametime 7.5
Ibm Lotus Sametime 8.5.2
Ibm Lotus Sametime 7.5.1.1
890
VMScore
CVE-2010-3398
Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, aka SPRs LXUU87S57H and LXUU87S93W.
Ibm Lotus Sametime 8.0.1
Ibm Lotus Sametime 8.0
Ibm Lotus Sametime 7.5.1
Ibm Lotus Sametime 7.5
Ibm Lotus Sametime 8.5
Ibm Lotus Sametime 2.5
Ibm Lotus Sametime
Ibm Lotus Sametime 8.0.2
Ibm Lotus Sametime 7.0
Ibm Lotus Sametime 1.5
312
VMScore
CVE-2013-0533
Cross-site scripting (XSS) vulnerability in the Sametime Links server in IBM Sametime 8.0.2 up to and including 8.5.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Lotus Sametime 8.5.2
Ibm Lotus Sametime 8.5.2.1
Ibm Lotus Sametime 8.0.2.1
Ibm Lotus Sametime 8.5
Ibm Lotus Sametime 8.5.1
Ibm Lotus Sametime 8.5.1.1
Ibm Lotus Sametime 8.0.2
169
VMScore
CVE-2013-0534
The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory.
Ibm Sametime 8.5.1.1
Ibm Sametime 8.5.1
Ibm Lotus Sametime 8.5.2.1
Ibm Lotus Sametime 8.5.1.2
Ibm Lotus Sametime 8.5.1.1
Ibm Lotus Sametime 8.5.2
Ibm Sametime 8.5.2.1
Ibm Lotus Sametime 8.5.1
Ibm Sametime 8.5.1.2
Ibm Sametime 8.5.2
312
VMScore
CVE-2013-0535
Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 up to and including 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Ibm Lotus Sametime 7.5.1.2
Ibm Lotus Sametime 8.5.1
Ibm Lotus Sametime 8.5.1.1
Ibm Classic Meeting Server 8.0.1
Ibm Classic Meeting Server 7.5.1.2
Ibm Lotus Sametime 8.0.2.1
Ibm Lotus Sametime 8.5
Ibm Classic Meeting Server 8.5
Ibm Lotus Sametime 8.0.1.1
Ibm Lotus Sametime 8.0.2
Ibm Classic Meeting Server 8.5.2.1
Ibm Classic Meeting Server 8.5.1.2
Ibm Classic Meeting Server 8.0.2
Ibm Lotus Sametime 8.0
Ibm Lotus Sametime 8.0.1
Ibm Lotus Sametime 8.5.2
Ibm Lotus Sametime 8.5.2.1
435
VMScore
CVE-2011-1106
Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote malicious users to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action.
Ibm Lotus Sametime
Ibm Lotus Sametime 8.0
Ibm Lotus Sametime 8.0.1
1 EDB exploit
312
VMScore
CVE-2013-0553
The client implementation in IBM Sametime 8.5.1 up to and including 8.5.2.1, as used in Sametime Connect client, Sametime Advanced Connect client, Sametime Advanced Web client, and other products, allows remote authenticated users to send commands to individual chat users, or to ...
Ibm Lotus Sametime 8.5.1.1
Ibm Sametime 8.5.2.0
Ibm Sametime 8.5.2.1
Ibm Lotus Sametime 8.5.1
828
VMScore
CVE-2007-1784
The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime prior to 7.5 allows remote malicious users to load arbitrary DLL libraries and execute arbitrary code via arbitrary arguments to the loadLibrary function.
Ibm Lotus Sametime 7.5
Ibm Lotus Sametime
760
VMScore
CVE-2008-2499
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and previous versions, and 8.x prior to 8.0.1, allows remote malicious users to execute arbitrary code via a crafted URL.
Ibm Lotus Sametime 7.5.1
Ibm Lotus Sametime
2 EDB exploits
258
VMScore
CVE-2013-3985
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote malicious users to read session variables by leveraging a weak setting of the Domain variable.
Ibm Lotus Sametime 8.5.2.1
Ibm Lotus Sametime 8.5.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »