CVE-2013-0535

IBM Classic Meeting Server 7.5.1.2-8.5.2.1 - Authenticated Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/82657
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21635185
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21635545

Scores

EPSS 0.0094
EPSS Percentile 57.1%

Details

CWE
CWE-79
Status published
Products (17)
ibm/classic_meeting_server 7.5.1.2
ibm/classic_meeting_server 8.0.1
ibm/classic_meeting_server 8.0.2
ibm/classic_meeting_server 8.5
ibm/classic_meeting_server 8.5.1.2
ibm/classic_meeting_server 8.5.2.1
ibm/lotus_sametime 7.5.1.2
ibm/lotus_sametime 8.0
ibm/lotus_sametime 8.0.1
ibm/lotus_sametime 8.0.1.1
... and 7 more
Published May 02, 2013
Tracked Since Feb 18, 2026