Vulnerabilities (CVE)

Filtered by vendor Hcltech Subscribe
Filtered by product Sametime
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-27769 1 Hcltech 1 Sametime 2022-07-29 5.0 MEDIUM 5.3 MEDIUM
Information leakage occurs when a website reveals information that could aid an attacker to further exploit the system. This information may or may not be sensitive and does not automatically mean a breach is likely to occur. Overall, any information that could be used for an attack should be limited whenever possible.
CVE-2021-27772 1 Hcltech 1 Sametime 2022-07-29 4.0 MEDIUM 6.5 MEDIUM
Users are able to read group conversations without actively taking part in them. Next to one to one conversations, users are able to start group conversations with multiple users. It was found possible to obtain the contents of these group conversations without being part of it. This could lead to information leakage where confidential information discussed in private groups is read by other users without the users knowledge.
CVE-2021-27773 1 Hcltech 1 Sametime 2022-05-24 4.3 MEDIUM 4.3 MEDIUM
This vulnerability allows users to execute a clickjacking attack in the meeting's chat.