VYPR
← All advisories
Low severity2.7NVD Advisory· Published Mar 17, 2026· Updated Mar 31, 2026

CVE-2025-31966

CVE-2025-31966

Description

HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server.

Affected products

2
  • HCLTech/Sametime2 versions
    cpe:2.3:a:hcltech:sametime:*:*:*:*:*:-:*:*+ 1 more
    • cpe:2.3:a:hcltech:sametime:*:*:*:*:*:-:*:*range: <12.0.3
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.