CVE-2013-0535

IBM Sametime <8.5.2.1 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Various Sources] http://www-01.ibm.com/support/docview.wss?uid=swg21635185

[Various Sources] http://www-01.ibm.com/support/docview.wss?uid=swg21635545

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/82657

Scores

EPSS 0.0016

EPSS Percentile 36.8%

Details

CWE

CWE-79

Status published

Products (18)

ibm/classic_meeting_server

ibm/lotus_sametime

... and 8 more

Published May 02, 2013

Tracked Since Feb 18, 2026