low2.7
CVE-2025-31966
HCL Sametime is vulnerable to broken server-side validation.
Impact
HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Sametime | before 12.0.3 |