CVE-2023-45698: HCL Sametime is impacted by clickjacking
Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-45698?
CVE-2023-45698 has been classified as a high-severity vulnerability due to its exploitation potential for clickjacking attacks.
How do I fix CVE-2023-45698?
To mitigate CVE-2023-45698, implement appropriate clickjacking protection measures in your application as per best security practices.
Which versions of Sametime are affected by CVE-2023-45698?
CVE-2023-45698 affects HCL Sametime versions 11.5, 11.6, and 12.0, including their respective fix packs.
What type of attack does CVE-2023-45698 relate to?
CVE-2023-45698 relates to clickjacking attacks, which can lead to unauthorized actions being taken on behalf of users.
Is there a patch available for CVE-2023-45698?
Currently, a specific patch for CVE-2023-45698 is not mentioned, so users should follow the recommended mitigation practices.