CVE-2014-4748

Currently unrated

Key Information:

Vendor: IBM
Status: Sametime
Vendor: CVE Published:; 26 July 2014

Summary

Cross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21679221

x_refsource_CONFIRM

http://packetstormsecurity.com/files/127831/IBM-Sametime-...

x_refsource_MISC

http://secunia.com/advisories/60202

third-party-advisoryx_refsource_SECUNIA

Timeline

Vulnerability published
Jul 26, 2014
Vulnerability Reserved
Jul 9, 2014