{"id":"CVE-2013-3983","aliases":["EUVD-2013-3915","GHSA-hw9g-wm2x-4jf4"],"status":"published","title":"The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not...","description":"The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01096,"percentile":0.65765,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2014-02-13T22:00:00Z","modified":"2026-06-16T23:56:07Z","products":[{"vendor":"ibm","product":"sametime"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/84966","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21662928","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3983"},{"url":"https://github.com/advisories/GHSA-hw9g-wm2x-4jf4"}],"sources":{"cve":[{"id":"CVE-2013-3983","description":"The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors.","status":"published","published":"2014-02-13T22:00:00Z","modified":"2024-08-06T16:30:49.571Z","updated_at":"2026-11-02T14:34:56.872243Z"}],"euvd":[{"id":"EUVD-2013-3915","description":"The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors.","status":"published","published":"2014-02-13T22:00:00Z","modified":"2024-08-06T16:30:49Z","updated_at":"2026-11-03T01:56:33.663204Z"}],"ghsa":[{"id":"GHSA-hw9g-wm2x-4jf4","title":"The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not...","description":"The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors.","status":"published","published":"2022-05-17T01:33:59Z","modified":"2023-02-03T05:04:40Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:53:36.332016Z"}],"nvd":[{"id":"CVE-2013-3983","description":"The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors.","status":"published","published":"2014-02-14T13:10:48.467Z","modified":"2026-06-16T23:56:07.733Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:48.062712Z"}]}}