ZeroDay Findings
Sign inSign up

Findings

CVE-2025-32000

HCL Sametime is vulnerable to insufficient input sanitization.

Published Sep 24, 2026 · updated Oct 14, 2026

HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 24, 2026 · NIST NVD

    Detected

    HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.

  2. Oct 14, 2026 · NIST NVD

    Updated

    HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.

Sources

  • CVE.orgVulnerability recordCVE-2025-32000

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2025-32000

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2025-32000

    HCL Sametime is vulnerable to insufficient input sanitization. The application did not appropriately sanitize user input. When user input is implicitly or explicitly trusted without sufficient sanitization, malicious actors can leverage this vulnerability.

    nvd.nist.gov

References