CVE-2025-32000CWE-20

CVE-2025-32000

Medium · published September 24, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00213 · 11.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-09-24T20:17Z
References (1)
EPSS history
Timeline
  • 26 SEP 03:21Z
    EPSS moved — → 0%
    epss
  • 24 SEP 15:21Z
    Insufficient Input Sanitization is addressed in HCL Sametime 12.0.4. It is recommended to upgrade to the latest version.
    cvelistv5