IBM Classic Meeting Server vulnerabilities

2 CVEs affecting IBM Classic Meeting Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-4766, published 2014-10-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-4766, published 2014-10-23. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Sametime Classic Meeting Server 8.0.x and 8.5.x allows remote attackers to obtain sensitive information by reading an exported Record and Playback (RAP) file.
CVE-2013-0535, published 2013-05-02. Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the Classic Meeting Server in IBM Sametime 7.5.1.2 through 8.5.2.1 allow remote authenticated users to inject arbitrary web script or HTML via…