CVE-2023-50349: Hcltech Sametime

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an attacker to perform malicious actions on the application.

Affected products

• Hcltech Sametime: before 12.0.2 (fixed in 12.0.2)

Published 2024-02-09. Last modified 2026-06-17.