VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 17, 2012· Updated Jun 16, 2026

CVE-2012-3308

CVE-2012-3308

Description

Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat.

Affected products

8
  • IBM/Sametime8 versions
    cpe:2.3:a:ibm:sametime:8.0.2.0:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:ibm:sametime:8.0.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:8.0.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:8.5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:8.5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:8.5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*
    • (no CPE)range: 8.0.2 - 8.5.2.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.