Vulnerability · Published Feb 10, 2024 · Assigned by HCL
CVE-2023-45698HCL Sametime is impacted by clickjacking
Medium 4.8
In plain English
A medium-severity security flaw in HCL Sametime from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)0.3%top 75.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropriate protections in order to protect users from clickjacking attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | HCL Sametime | 11.5, 11.6, 11.6 IF1, 12.0, 12.0 FP1, 12.0.1, 12.0.1 FP1 |
Weakness: CWE-1021 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N