Detections
Analytics
CVE-2025-31966
low
Description
HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server.
References
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124722