CVE-2013-3046: The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not send the HSTS Stric...

Security readout for executives and security teams

IBM Sametime Meeting Server did not send the HSTS header in the listed affected versions. That weakens browser enforcement of HTTPS and can make session hijacking or sensitive information exposure easier when an attacker can interfere with user traffic. Exposure is most relevant where affected IBM Sametime Meeting Server versions remain reachable by users, especially over untrusted networks or through HTTP-to-HTTPS transition paths. The bundle does not identify affected CPEs beyond the product/version text. Treat as a targeted remediation item for legacy collaboration infrastructure. It is not sourced as actively exploited, but it affects confidentiality of meetings and sessions when users connect over interceptable networks. Mitigation focus: Check IBM support guidance for fixed or recommended Sametime levels.; Retire or upgrade affected Sametime Meeting Server versions where possible.; Enforce HTTPS-only access at the server or trusted edge..

Prepared

Jun 14, 2026, 07:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.