VULNERABILITY INTELLIGENCE

CVE-2013-3983

CVSS score7.5 HIGH
EPSS probability1.10%
CISA KEVNot currently listed
Published2014-02-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references