Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 up to and including 8.5.2.1 and 9.x up to and including 9.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IMG element.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm sametime 9.0.0.0 |
||
ibm sametime 9.0.0.1 |
||
ibm sametime 8.5.2.0 |
||
ibm sametime 8.5.2.1 |
Vulmon