CVE-2012-3308

https://notcve.org/view.php?id=CVE-2012-3308

Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en IBM Sametime v8.0.2 a v8.5.2.1 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de un chat de mensajería instantánea. • http://www.ibm.com/support/docview.wss?uid=swg21599114 http://www.ibm.com/support/docview.wss?uid=swg21607903 http://www.securitytracker.com/id?1027402 https://exchange.xforce.ibmcloud.com/vulnerabilities/77567 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •