GCVE - cpe:2.3:a:ibm:lotus_sametime:8.0.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:lotus_sametime:8.0.1:*:*:*:*:*:*:*

part: a version: 8.0.1 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Lotus Sametime (`fbc1debe-6db0-5c58-a4a1-c2f9e8cd2302`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-0535`	vulnerable	2026-06-08 05:03:48.493746	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Published: 2013-05-02T18:00:00.000Z Updated: 2024-08-06T14:33:03.531Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/82657 http://www-01.ibm.com/support/docview.wss?uid=swg21635185 http://www-01.ibm.com/support/docview.wss?uid=swg21635545	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1370`	vulnerable	2026-06-08 04:57:58.625004	Details available The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message. Published: 2011-10-29T10:00:00.000Z Updated: 2024-08-06T22:21:34.346Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/70923 http://www-01.ibm.com/support/docview.wss?uid=swg21569452	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1106`	vulnerable	2026-06-08 04:57:55.740653	Details available Cross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script or HTML via the authReasonCode parameter in an OpenDatabase action. Published: 2011-03-01T22:00:00.000Z Updated: 2024-08-06T22:14:27.804Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/65555 http://archives.neohapsis.com/archives/bugtraq/2011-02/0217.html http://www.securityfocus.com/bid/46481 http://secunia.com/advisories/43430	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1038`	vulnerable	2026-06-08 04:56:40.971474	Details available Multiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the messageString parameter in a WebMessage action or (2) the PATH_INFO. Published: 2011-02-22T18:00:00.000Z Updated: 2024-08-06T22:14:27.152Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/65555 http://securityreason.com/securityalert/8100 http://www.securityfocus.com/bid/46471 http://secunia.com/advisories/43430 http://www.securityfocus.com/archive/1/516563/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3398`	vulnerable	2026-06-08 04:55:14.392767	Details available Unspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, aka SPRs LXUU87S57H and LXUU87S93W. Published: 2010-09-15T19:00:00.000Z Updated: 2024-09-17T03:48:57.977Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/43220 http://www-01.ibm.com/support/docview.wss?uid=swg21445669 http://www.vupen.com/english/advisories/2010/2380	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.