Advisories · Technology

HCL Software HCL Sametime.

Every CVE that names HCL Software HCL Sametime among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-32000 CVE record

CVSS 4.3 Medium

Insufficient Input Sanitization is addressed in HCL Sametime 12.0.4. It is recommended to upgrade to the latest version.
- HCL Software HCL Sametime
- CWE-20
Not analysed yet 24 Sept 2026
CVE-2023-45698 CVE record

CVSS 4.8 Medium

HCL Sametime is impacted by clickjacking
- HCL Software HCL Sametime
- CWE-1021
Not analysed yet 10 Feb 2024
CVE-2023-45696 CVE record

CVSS 4.0 Medium

HCL Sametime is impacted by an autocomplete enabled vulnerability
- HCL Software HCL Sametime
- CWE-524
Not analysed yet 10 Feb 2024
CVE-2023-45718 CVE record

CVSS 3.9 Low

HCL Sametime is impacted by a failure to invalidate sessions
- HCL Software HCL Sametime
- Authentication bypass
Not analysed yet 9 Feb 2024
CVE-2023-45716 CVE record

CVSS 1.7 Low

HCL Sametime is impacted by a sensitive information disclosure
- HCL Software HCL Sametime
- CWE-598
Not analysed yet 9 Feb 2024
CVE-2023-50349 CVE record

CVSS 5.9 Medium

HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
- HCL Software HCL Sametime
- Cross-site request forgery (CSRF)
Not analysed yet 9 Feb 2024
CVE-2022-42446 CVE record

CVSS 6.5 Medium

HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access
- HCL Software HCL Sametime
- Broken access control
Not analysed yet 30 Nov 2022