What is the severity of CVE-2023-45698?

CVE-2023-45698 has been classified as a high-severity vulnerability due to its exploitation potential for clickjacking attacks.

How do I fix CVE-2023-45698?

To mitigate CVE-2023-45698, implement appropriate clickjacking protection measures in your application as per best security practices.

Which versions of Sametime are affected by CVE-2023-45698?

CVE-2023-45698 affects HCL Sametime versions 11.5, 11.6, and 12.0, including their respective fix packs.

What type of attack does CVE-2023-45698 relate to?

CVE-2023-45698 relates to clickjacking attacks, which can lead to unauthorized actions being taken on behalf of users.

Is there a patch available for CVE-2023-45698?

Currently, a specific patch for CVE-2023-45698 is not mentioned, so users should follow the recommended mitigation practices.

Vulnerability/
CVE-2023-45698

medium

6.1

CWE

1021

10/2/2024

28/10/2024

CVE-2023-45698: HCL Sametime is impacted by clickjacking

First published: Sat Feb 10 2024(Updated: )

Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks.

Credit: psirt@hcl.com

Affected Software	Affected Version	How to fix
HCL Sametime	=11.5
HCL Sametime	=11.6
HCL Sametime	=11.6-if1
HCL Sametime	=12.0
HCL Sametime	=12.0-fp1
HCL Sametime	=12.0.1
HCL Sametime	=12.0.1-fp1

Never miss a vulnerability like this again

Reference Links

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109082

Frequently Asked Questions

What is the severity of CVE-2023-45698?
CVE-2023-45698 has been classified as a high-severity vulnerability due to its exploitation potential for clickjacking attacks.
How do I fix CVE-2023-45698?
To mitigate CVE-2023-45698, implement appropriate clickjacking protection measures in your application as per best security practices.
Which versions of Sametime are affected by CVE-2023-45698?
CVE-2023-45698 affects HCL Sametime versions 11.5, 11.6, and 12.0, including their respective fix packs.
What type of attack does CVE-2023-45698 relate to?
CVE-2023-45698 relates to clickjacking attacks, which can lead to unauthorized actions being taken on behalf of users.
Is there a patch available for CVE-2023-45698?
Currently, a specific patch for CVE-2023-45698 is not mentioned, so users should follow the recommended mitigation practices.

agent/title
agent/references
agent/type
agent/first-publish-date
agent/description
agent/author
agent/event
agent/severity
agent/weakness
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/hcltech
canonical/hcl sametime
version/hcl sametime/11.5
version/hcl sametime/11.6
version/hcl sametime/11.6-if1
version/hcl sametime/12.0
version/hcl sametime/12.0-fp1
version/hcl sametime/12.0.1
version/hcl sametime/12.0.1-fp1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.