CVSS: 3.5EPSS: 0%CPEs: 2EXPL: 0CVE-2013-0537
https://notcve.org/view.php?id=CVE-2013-0537
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges. Vulnerabilidad en Enterprise Meeting Server de IBM Lotus Sametime 8.5.2 y 8.5.2.1 permite a usuarios remotos autenticados falsificar el origen de enlaces compartidos mediante el aprovechamiento de privilegios meeting-attendance. • http://www-01.ibm.com/support/docview.wss?uid=swg21654355 https://exchange.xforce.ibmcloud.com/vulnerabilities/84840 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 3.5EPSS: 0%CPEs: 2EXPL: 0CVE-2013-3045
https://notcve.org/view.php?id=CVE-2013-3045
The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function. Enterprise Meeting Server en IBM Lotus Sametime 8.5.2 y 8.5.2.1 permite a usuarios remotos autenticados compartir enlaces manipulados a través de la función Library. • http://www-01.ibm.com/support/docview.wss?uid=swg21654355 https://exchange.xforce.ibmcloud.com/vulnerabilities/84816 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 1%CPEs: 2EXPL: 0CVE-2013-3986 – IBM Lotus Sametime WebPlayer Denial of Service
https://notcve.org/view.php?id=CVE-2013-3986
IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension crash) via a crafted Audio Visual (AV) session. IBM Lotus Sametime 8.5.2 y 8.5.2.1 permite a atacantes remotos provocar una denegación de servicio (cierre de la extensión WebPlayer de Firefox) a través de una sesión Audio Visual (AV). • http://www-01.ibm.com/support/docview.wss?uid=swg21654041 https://exchange.xforce.ibmcloud.com/vulnerabilities/84969 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 1.9EPSS: 0%CPEs: 10EXPL: 0CVE-2013-0534
https://notcve.org/view.php?id=CVE-2013-0534
The Connect client in IBM Sametime 8.5.1, 8.5.1.1, 8.5.1.2, 8.5.2, and 8.5.2.1, as used in the Lotus Notes client and separately, might allow local users to obtain sensitive information by leveraging the persistence of cleartext password strings within process memory. El cliente Connect en IBM Sametime v8.5.1, v8.5.1.1, v8.5.1.2, v8.5.2, y v8.5.2.1, como se usaba en el cliente Lotus Notes puede permitir a usuarios locales obtener información sensible mediante el aprovechamiento de contraseñas persistentes en texto plano dentro de la memoria del proceso. • http://www-01.ibm.com/support/docview.wss?uid=swg21635218 https://exchange.xforce.ibmcloud.com/vulnerabilities/82656 • CWE-255: Credentials Management Errors •
CVSS: 3.5EPSS: 0%CPEs: 17EXPL: 0CVE-2013-0535
https://notcve.org/view.php?id=CVE-2013-0535
Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados en Classic Meeting Server en IBM Sametime v7.5.1.2 hasta v8.5.2.1 que permite a usuarios autenticados inyectar secuencias arbitrarias de comandos web o HTML a través de vectores sin especificar. • http://www-01.ibm.com/support/docview.wss?uid=swg21635185 http://www-01.ibm.com/support/docview.wss?uid=swg21635545 https://exchange.xforce.ibmcloud.com/vulnerabilities/82657 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •