{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T06:23:45.162","vulnerabilities":[{"cve":{"id":"CVE-2025-31966","sourceIdentifier":"psirt@hcl.com","published":"2026-03-17T12:16:12.337","lastModified":"2026-06-17T09:11:15.050","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"HCL Sametime is vulnerable to broken server-side validation. While the application performs client-side input checks, these are not enforced by the web server. An attacker can bypass these restrictions by sending manipulated HTTP requests directly to the server."},{"lang":"es","value":"HCL Sametime es vulnerable a una validación rota del lado del servidor. Aunque la aplicación realiza comprobaciones de entrada del lado del cliente, estas no son aplicadas por el servidor web. Un atacante puede eludir estas restricciones enviando solicitudes HTTP manipuladas directamente al servidor."}],"affected":[{"source":"psirt@hcl.com","affectedData":[{"vendor":"HCL","product":"Sametime","defaultStatus":"unaffected","versions":[{"version":"Version 2.0.2 FP2 and older","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@hcl.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-17T12:57:19.569896Z","id":"CVE-2025-31966","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@hcl.com","type":"Secondary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hcltech:sametime:*:*:*:*:*:-:*:*","versionEndExcluding":"12.0.3","matchCriteriaId":"B4DDE282-CD1A-4F62-BE5C-AB81CCC702B1"}]}]}],"references":[{"url":"https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0124722","source":"psirt@hcl.com","tags":["Vendor Advisory"]}]}}]}