What’s Vulnerable › Products

HCL Software Sametime vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your HCL Software Sametime version is affected

Latest HCL Software Sametime vulnerabilities

• CVE-2025-32000 — Insufficient Input Sanitization is addressed in HCL Sametime 12.0.4. It is recommended to upgrade to the latest version. (CVSS 4.3)
• CVE-2025-31966 — Boolean-Based SQL Injection in Multiple Unica Components (CVSS 2.7)
• CVE-2026-21791 — HCL Sametime for Android is affected by sensitive information disclosure (CVSS 3.3)
• CVE-2026-21786 — HCL Sametime for iOS is affected by sensitive information disclosure (CVSS 3.3)
• CVE-2023-50355 — HCL Sametime is impacted by generation of error messages containing sensitive information (CVSS 5.3)
• CVE-2024-30124 — HCL Sametime is impacted by insecure services (CVSS 4.0)
• CVE-2024-30122 — HCL Sametime is impacted by misconfigured security related HTTP headers (CVSS 5.3)
• CVE-2023-37540 — HCL Sametime Chat is affected by an unimplemented feature in the UI (CVSS 3.9)
• CVE-2023-45696 — HCL Sametime is impacted by an autocomplete enabled vulnerability (CVSS 7.5)
• CVE-2023-45718 — HCL Sametime is impacted by a failure to invalidate sessions (CVSS 7.5)
• CVE-2023-45716 — HCL Sametime is impacted by a sensitive information disclosure (CVSS 4.1)
• CVE-2023-50349 — HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2022-42446 — HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access (CVSS 6.5)
• CVE-2021-27773 — HCL Sametime is vulnerable to clickjacking (CVSS 4.3)
• CVE-2021-27772 — HCL Sametime is vulnerable to an information disclosure (CVSS 6.5)
• CVE-2021-27771 — HCL Sametime is susceptible a file transfer service vulnerability (CVSS 7.6)
• CVE-2021-27770 — HCL Sametime is vulnerable to arbitrary HTTP requests (CVSS 8.8)
• CVE-2021-27769 — HCL Sametime is vulnerable to an information disclosure (CVSS 5.3)