CVE-2012-3308: XSS
Published Aug 17, 2012
·Updated
Cross-site scripting (XSS) vulnerability in IBM Sametime 8.0.2 through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via an IM chat.
Affected Software
7 affected components
IBM Sametime=8.0.2.0
IBM Sametime=8.0.2.1
IBM Sametime=8.5.0.0
IBM Sametime=8.5.1.0
IBM Sametime=8.5.1.1
IBM Sametime=8.5.2.0
IBM Sametime=8.5.2.1
Remediation
Patch Available
Event History
Aug 17, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3308?
CVE-2012-3308 is considered a medium severity vulnerability due to the potential for remote code execution through XSS attacks.
2
How do I fix CVE-2012-3308?
To fix CVE-2012-3308, upgrade to a patched version of IBM Sametime, specifically versions released after 8.5.2.1.
3
What types of attacks exploit CVE-2012-3308?
CVE-2012-3308 can be exploited through cross-site scripting (XSS) attacks via malicious IM chat messages.
4
Which versions of IBM Sametime are affected by CVE-2012-3308?
CVE-2012-3308 affects IBM Sametime versions 8.0.2 through 8.5.2.1.
5
How do attackers exploit CVE-2012-3308?
Attackers exploit CVE-2012-3308 by injecting arbitrary web scripts or HTML through compromised IM chats.