CVE-2016-2972: IBM Sametime

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which could be accessed by a local user. IBM X-Force ID: 113855.

Affected products

• IBM Sametime: version 8.5.2.0 only; version 8.5.2.1 only; version 9.0.0.0 only; version 9.0.0.1 only; version 9.0.1 only

Published 2017-08-29. Last modified 2026-06-17.