CVE-2023-45718: Hcltech Sametime

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session.  

Affected products

• Hcltech Sametime: from 11.5, before 12.0.2 (fixed in 12.0.2)

Published 2024-02-09. Last modified 2026-06-17.