CVE-2016-2974

Severity: low (CVSS 3.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-29 · updated 2026-06-17
Weakness: CWE-200

Description

IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.

Affected products

IBM Sametime: 8.5.2.0, 8.5.2.1, 9.0.0.0, 9.0.0.1, 9.0.1

References

http://www.ibm.com/support/docview.wss?uid=swg22006444
http://www.securityfocus.com/bid/100528
https://exchange.xforce.ibmcloud.com/vulnerabilities/113934
http://www.ibm.com/support/docview.wss?uid=swg22006444
http://www.securityfocus.com/bid/100528
https://exchange.xforce.ibmcloud.com/vulnerabilities/113934

Get alerted when CVE-2016-2974 or the next vulnerability affects your stack