XSS in Ibm Classic_meeting_server
CVE-2013-0535
Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm Classic_meeting_server — versions 7.5.1.2, 8.0.1, 8.0.2
- Ibm Lotus_sametime — versions 7.5.1.2, 8.0, 8.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM)
- psirt@us.ibm.com (x_refsource_CONFIRM)