CVE-2025-32000: Hcl Software Hcl Sametime

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.

Affected products

• Hcl Software Hcl Sametime: up to and including 12.0.33

Published 2026-09-24. Last modified 2026-09-24.