Skip to content
Heist/ feed
Medium

Insufficient Input Sanitization is addressed in HCL Sametime 12.0.4. It is recommended to upgrade to the latest version.

Type: advisorySource: Official CVE List1 source record

HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.

Announced Source revision 1
Original source ↗

CVE-2025-32000

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-32000

HCL Sametime

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "HCL Software",
    "product": "HCL Sametime",
    "versions": [
      {
        "status": "affected",
        "version": "12.0.33 and older"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
Related CVEs
CVE-2025-32000

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#1785 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement