Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy application can allow an attacker to perform malicious actions on the application.
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0109082