CVE-2025-32000
HCL Sametime is vulnerable to insufficient input sanitization.
Published Sep 24, 2026 · updated Oct 14, 2026
HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.
Timeline
Detection, updates, and resolution for this record.
Sep 24, 2026 · NIST NVD
Detected
HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.
Oct 14, 2026 · NIST NVD
Updated
HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.
Sources
- CVE.orgCVE-2025-32000
Official CVE identifier
cve.org - NIST NVDCVE-2025-32000
HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.
nvd.nist.gov