Hcl Sametime
Monthly
Insufficient input sanitization in HCL Sametime allows remote, unauthenticated attackers to expose limited information to a victim who interacts with attacker-controlled content processed by the product's web interface. According to the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, score 4.3), exploitation cannot occur autonomously - the attacker must socially engineer a target into opening or interacting with crafted input - and the resulting impact is read-only information disclosure with no integrity or availability effect. No public exploit code or confirmed active exploitation has been identified at time of analysis, and HCL's advisory (KB0132652) does not specify which feature, input field, or configuration is affected.
Insufficient input sanitization in HCL Sametime allows remote, unauthenticated attackers to expose limited information to a victim who interacts with attacker-controlled content processed by the product's web interface. According to the assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, score 4.3), exploitation cannot occur autonomously - the attacker must socially engineer a target into opening or interacting with crafted input - and the resulting impact is read-only information disclosure with no integrity or availability effect. No public exploit code or confirmed active exploitation has been identified at time of analysis, and HCL's advisory (KB0132652) does not specify which feature, input field, or configuration is affected.