← Back

CVE-2025-31966

nvd nist
Published: Mar 17, 2026Modified: Jun 17, 2026

JSON object

Loading...
2.7
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Exploitability: 1.2 / Impact: 1.4
Source: psirt@hcl.com (Secondary)

Description

HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server.

Affected (1)

Products: Hcltech: Sametime
Hcltech
1 product
Sametime
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sametime
Before 12.0.3

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

Source: psirt@hcl.com
Vendor Advisory

Timeline

No history available yet.