The host is running IBM Lotus Sametime Server and is prone to cross site scripting vulnerability

Successful exploitation allows remote attackers to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Impact Level: Application.

Vendor has rleased a patch to fix this issue, please refer below link for patch information. http://www-01.ibm.com/support/docview.wss?rs=899&uid=swg21496276

Input passed to the 'authReasonCode' parameter in 'stcenter.nsf' when 'OpenDatabase' is set, is not properly sanitised before being returned to the user.

IBM Lotus Sametime version 8.0 and 8.0.1

• http://downloads.securityfocus.com/vulnerabilities/exploits/46481.txt
• http://secunia.com/advisories/43430/
• http://xforce.iss.net/xforce/xfdb/65555

---

Updated on 2015-03-25