CVE-2014-4748

Description

References

• linux.oracle.com/errata/ELSA-2014-0747.html
• packetstormsecurity.com/files/127831/IBM-Sametime-Meet-Server-8.5-Cross-Site-Scripting.html
• secunia.com/advisories/60202
• www-01.ibm.com/support/docview.wss · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/94350

Weitere Schwachstellen in sametime

• CVE-2012-3331MITTEL 5.3IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct request to STLOG.NSF. IBM X…
• CVE-2016-2980MITTEL 6.3The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a …
• CVE-2016-2978NIEDRIG 3.3IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local u…
• CVE-2016-2976MITTEL 4.3IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the me…
• CVE-2016-2975MITTEL 5.4IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the …