← Vulnerability feed

Vulnerability record · CVE-2007-6295 · published 10 December 2007

CVE-2007-6295: Ibm lotus sametime cross-site scripting vulnerability

Ibm · Lotus Sametime

Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.

4.3 CVSS 2.0 Medium EPSS 1.3% · top 31.5% CWE-79 · Cross-site scripting
4.3CVSS 2.0 base score
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 allows remote attackers to inject arbitrary web script or HTML via the URI.

AV:N/AC:M/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/39258
http://secunia.com/advisories/27941 Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=sim5079c9d76e4fcf910852573a800495249
http://www.securityfocus.com/bid/26734
http://www.securitytracker.com/id?1019053
http://www.vupen.com/english/advisories/2007/4104
https://exchange.xforce.ibmcloud.com/vulnerabilities/38891
http://osvdb.org/39258
http://secunia.com/advisories/27941 Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=sim5079c9d76e4fcf910852573a800495249
http://www.securityfocus.com/bid/26734
http://www.securitytracker.com/id?1019053
http://www.vupen.com/english/advisories/2007/4104
https://exchange.xforce.ibmcloud.com/vulnerabilities/38891

Track CVE-2007-6295 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2010-3398Ibm lotus sametime vulnerabilityUnspecified vulnerability in the webcontainer implementation in IBM Lotus Sametime Connect 8.5.1 before CF1 has unknown impact and attack vectors, ak…EPSS 1.4%9.3CVE-2007-1784Ibm lotus sametime vulnerabilityThe JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DLL librari…EPSS 3.5%7.5CVE-2008-2499IBM Lotus Sametime MUX stack buffer overflow via crafted URLThe Community Services Multiplexer (StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, contains a stack-based buffer overf…EPSS 77%analysed5.0CVE-2011-1370Ibm lotus sametime vulnerabilityThe default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authen…EPSS 1.1%4.3CVE-2013-3986Ibm lotus sametime memory buffer overflow vulnerabilityIBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension crash) via a crafted Audio Vis…EPSS 9.3%4.3CVE-2011-1106Ibm lotus sametime cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in stcenter.nsf in the server in IBM Lotus Sametime allows remote attackers to inject arbitrary web script o…EPSS 1.5%4.3CVE-2011-1038Ibm lotus sametime cross-site scripting vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in stconf.nsf in the server in IBM Lotus Sametime 8.0.1 allow remote attackers to inject arbitrar…EPSS 3.1%4.3CVE-2008-0354Ibm lotus sametime cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inject arbit…EPSS 2.9%

Source: NIST National Vulnerability Database (record CVE-2007-6295), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.