{"id":"CVE-2016-2974","aliases":["EUVD-2016-4047","GHSA-72mx-gcxg-xg6f"],"status":"published","title":"IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose...","description":"IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.","severity":{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00339,"percentile":0.27555,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-08-29T21:00:00Z","modified":"2026-06-17T00:44:45Z","products":[{"vendor":"hcl","product":"sametime"},{"vendor":"ibm","product":"sametime"}],"references":[{"url":"http://www.securityfocus.com/bid/100528","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/113934","tags":["x_refsource_MISC","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22006444","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2974"},{"url":"https://github.com/advisories/GHSA-72mx-gcxg-xg6f"}],"sources":{"cve":[{"id":"CVE-2016-2974","description":"IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.","status":"published","published":"2017-08-29T21:00:00Z","modified":"2024-09-16T18:24:13.64Z","updated_at":"2026-11-02T14:33:33.07583Z"}],"euvd":[{"id":"EUVD-2016-4047","description":"IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.","status":"published","published":"2017-08-29T21:00:00Z","modified":"2024-09-16T18:24:13Z","updated_at":"2026-11-03T00:55:32.945265Z"}],"ghsa":[{"id":"GHSA-72mx-gcxg-xg6f","title":"IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose...","description":"IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.","status":"published","published":"2022-05-17T01:18:59Z","modified":"2023-02-03T05:03:50Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:26.410699Z"}],"nvd":[{"id":"CVE-2016-2974","description":"IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user. IBM X-Force ID: 113934.","status":"published","published":"2017-08-29T21:29:00.34Z","modified":"2026-06-17T00:44:45.49Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:39.176887Z"}]}}