Vulnerability · Published May 12, 2022 · Assigned by HCL
CVE-2021-27773HCL Sametime is vulnerable to clickjacking
Medium 4.2
In plain English
A medium-severity security flaw in Sametime from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)4.2Medium
Exploit odds (30 days)0.5%top 59.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
This vulnerability allows users to execute a clickjacking attack in the meeting's chat.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | Sametime | 11.6 |
Weakness: CWE-451 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N