VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 14, 2014· Updated Jun 17, 2026

CVE-2013-6743

CVE-2013-6743

Description

Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IMG element.

Affected products

5
  • IBM/Sametime5 versions
    cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:9.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:sametime:9.0.0.1:*:*:*:*:*:*:*
    • (no CPE)range: 8.5.2 - 8.5.2.1, 9.0 - 9.0.0.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.