Hcl Sametime
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:hcl_sametime:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Hcl Sametime (f0e025e2-f4bb-5601-9ab1-2c3eac733648) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50349 |
vulnerable | 2026-06-08 06:16:15.972582 |
HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.9)
Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an attacker to perform malicious actions on the application.
Published: 2024-02-09T20:15:03.715Z
Updated: 2025-06-17T20:06:40.334Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45718 |
vulnerable | 2026-06-08 06:12:43.152950 |
HCL Sametime is impacted by a failure to invalidate sessions
LOW (3.9)
Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session.
Published: 2024-02-09T21:22:09.163Z
Updated: 2025-06-03T18:52:45.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45716 |
vulnerable | 2026-06-08 06:12:43.152510 |
HCL Sametime is impacted by a sensitive information disclosure
LOW (1.7)
Sametime is impacted by sensitive information passed in URL.
Published: 2024-02-09T21:17:50.900Z
Updated: 2025-06-03T18:53:23.304Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45698 |
vulnerable | 2026-06-08 06:12:43.129088 |
HCL Sametime is impacted by clickjacking
MEDIUM (4.8)
Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks.
Published: 2024-02-10T03:24:40.127Z
Updated: 2024-10-28T01:26:42.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45696 |
vulnerable | 2026-06-08 06:12:43.127294 |
HCL Sametime is impacted by an autocomplete enabled vulnerability
MEDIUM (4)
Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allows user entered data to be stored by the browser.
Published: 2024-02-10T03:10:30.423Z
Updated: 2025-06-03T18:54:13.238Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42446 |
vulnerable | 2026-06-08 05:49:29.968367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.