Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-3014

Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.0%
CVSS Severity
CVSS v2 Score 3.5
Products affected by CVE-2014-3014
  • Ibm » Sametime » Version: 8.0.0.0
    cpe:2.3:a:ibm:sametime:8.0.0.0
  • Ibm » Sametime » Version: 8.0.1.0
    cpe:2.3:a:ibm:sametime:8.0.1.0
  • Ibm » Sametime » Version: 8.0.1.1
    cpe:2.3:a:ibm:sametime:8.0.1.1
  • Ibm » Sametime » Version: 8.0.2.0
    cpe:2.3:a:ibm:sametime:8.0.2.0
  • Ibm » Sametime » Version: 8.0.2.1
    cpe:2.3:a:ibm:sametime:8.0.2.1
  • Ibm » Sametime » Version: 8.5.0.0
    cpe:2.3:a:ibm:sametime:8.5.0.0
  • Ibm » Sametime » Version: 8.5.1.0
    cpe:2.3:a:ibm:sametime:8.5.1.0
  • Ibm » Sametime » Version: 8.5.1.1
    cpe:2.3:a:ibm:sametime:8.5.1.1
  • Ibm » Sametime » Version: 8.5.2.0
    cpe:2.3:a:ibm:sametime:8.5.2.0
  • Ibm » Sametime » Version: 8.5.2.1
    cpe:2.3:a:ibm:sametime:8.5.2.1
  • Ibm » Sametime » Version: 9.0.0.0
    cpe:2.3:a:ibm:sametime:9.0.0.0
  • Ibm » Sametime » Version: 9.0.0.1
    cpe:2.3:a:ibm:sametime:9.0.0.1


Contact Us

Shodan ® - All rights reserved