CVE-2020-14232

2020-12-1723:59:59

HCL

www.cve.org

vulnerability

hcl notes v9

input parameter handling

stack buffer overflow

authenticated attacker

crash

code injection

privilege escalation

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

40.5%

JSON

A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the currently logged in user.

CNA Affected

[
  {
    "product": "HCL Notes",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v9"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085883