CVE-2016-2974: IBM Sametime

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.

Affected products

• IBM Sametime: version 8.5.2.0 only; version 8.5.2.1 only; version 9.0.0.0 only; version 9.0.0.1 only; version 9.0.1 only

Published 2017-08-29. Last modified 2026-06-17.