CVE-2013-0535: XSS
Published May 2, 2013
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
17 affected components
IBM Classic Meeting Server=7.5.1.2
IBM Classic Meeting Server=8.0.1
IBM Classic Meeting Server=8.0.2
IBM Classic Meeting Server=8.5
IBM Classic Meeting Server=8.5.1.2
IBM Classic Meeting Server=8.5.2.1
IBM Lotus Sametime=7.5.1.2
IBM Lotus Sametime=8.0
IBM Lotus Sametime=8.0.1
IBM Lotus Sametime=8.0.1.1
IBM Lotus Sametime=8.0.2
IBM Lotus Sametime=8.0.2.1
IBM Lotus Sametime=8.5
IBM Lotus Sametime=8.5.1
IBM Lotus Sametime=8.5.1.1
IBM Lotus Sametime=8.5.2
IBM Lotus Sametime=8.5.2.1
Event History
May 2, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0535?
CVE-2013-0535 has a medium severity rating due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2013-0535?
To fix CVE-2013-0535, upgrade your IBM Classic Meeting Server or HCL Sametime to a version that is not affected by this vulnerability.
3
What versions are affected by CVE-2013-0535?
CVE-2013-0535 affects IBM Classic Meeting Server versions 7.5.1.2 to 8.5.2.1 and HCL Sametime versions 7.5.1.2 to 8.5.2.1.
4
Can CVE-2013-0535 be exploited by non-authenticated users?
No, CVE-2013-0535 requires remote authenticated users to exploit the vulnerabilities.
5
What type of vulnerability is CVE-2013-0535?
CVE-2013-0535 is classified as a cross-site scripting (XSS) vulnerability.