Vulnerability Details : CVE-2016-2977
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937.
Vulnerability category: Input validation
Products affected by CVE-2016-2977
- cpe:2.3:a:ibm:sametime:8.5.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sametime:8.5.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sametime:9.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sametime:9.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sametime:9.0.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2016-2977
0.24%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 45 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2016-2977
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:P/A:N |
8.0
|
2.9
|
NIST | |
|
4.3
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
2.8
|
1.4
|
NIST |
CWE ids for CVE-2016-2977
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-2977
-
http://www.securityfocus.com/bid/100599
IBM Sametime Meetings Server Multiple Security Vulnerabilities
-
http://www.ibm.com/support/docview.wss?uid=swg22006439
IBM Security Bulletin: Multiple Security Vulnerabilities in IBM Sametime Meetings ServerPatch;Vendor Advisory
-
http://www.securitytracker.com/id/1039231
IBM Sametime Meetings Server Multiple Flaws Let Remote Users Conduct Cross-Site Scripting and Cross-Site Request Forgery Attacks and Let Remote Authenticated Users Remove Privileges and Modify Votes -Third Party Advisory;VDB Entry
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/113937
IBM Sametime Meeting Server spoofing CVE-2016-2977 Vulnerability ReportVDB Entry;Vendor Advisory
Jump to