CVE-2014-4748: XSS
Cross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4748?
CVE-2014-4748 has a medium severity level, indicating that it could allow an attacker to conduct cross-site scripting attacks.
How do I fix CVE-2014-4748?
To fix CVE-2014-4748, upgrade to a patched version of IBM Sametime above 8.5.2.1 that addresses this vulnerability.
What types of software are affected by CVE-2014-4748?
CVE-2014-4748 affects various versions of IBM Sametime from 8.0.0.0 through 8.5.2.1.
What is the impact of CVE-2014-4748?
The impact of CVE-2014-4748 allows remote attackers to inject arbitrary web scripts or HTML, potentially compromising user information.
Is CVE-2014-4748 easy to exploit?
CVE-2014-4748 is relatively easy to exploit, as it requires only a crafted URL which can be shared to trigger the XSS vulnerability.