Hcltech Sametime vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hcltech Sametime: 3 record(s), with affected versions and fixes.cpe:2.3:a:hcltech:sametime
CVE-2025-31966
Low · 2.7
CWE-20 Mar 17, 2026
Boolean-Based SQL Injection in Multiple Unica Components
HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server.
CVE-2026-21791
Low · 3.3
CWE-532 Mar 10, 2026
HCL Sametime for Android is affected by sensitive information disclosure
HCL Sametime for Android is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URL
CVE-2026-21786
Low · 3.3
CWE-532 Mar 5, 2026
HCL Sametime for iOS is affected by sensitive information disclosure
HCL Sametime for iOS is impacted by a sensitive information disclosure. Hostnames information is written in application logs and certain URLs.