CVE-2020-4097

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a...

CVE-2020-14240

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

CVE-2020-14222

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

Cross site scripting

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

Buffer overflow

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a...

Cross site scripting

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

CVE-2020-14222

The CVE-2020-14222 entry affects HCL Digital Experience versions 8.5, 9.0, and 9.5. A subcomponent is susceptible to reflected Cross-Site Scripting (XSS); exploitation requires the victim to click a crafted URL delivered via email or another site. The vulnerability’s impact is reflected XSS with ...

CVE-2020-14222

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

CVE-2020-4097

CVE-2020-4097 affects HCL Notes client. The vulnerability is in input parameter handling and can cause a buffer overflow, potentially crashing the client or allowing attacker‑controlled code execution. Affected versions are Notes Client releases prior to 9.0.1 FixPack 10 Interim Fix 8, prior to 1...

CVE-2020-4097

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a...

CVE-2020-14240

CVE-2020-14240 affects HCL Notes versions prior to 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1. The connected sources describe a Stored Cross-site Scripting (XSS) vulnerability in the Notes web interface that could allow an attacker to run scripts in the victim’s browser within the site’s security ...

CVE-2020-14240

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

CVE-2020-14222: Improper Neutralization of Input During Web Page Generation

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

HCL Notes Cross-Site Scripting Vulnerability

HCL Notes is a local email client from HCL India. HCL Notes suffers from a cross-site scripting vulnerability that stems from a lack of proper validation of client data by the WEB application. An attacker can exploit the vulnerability to run JavaScript code in the context of a website...

CVE-2020-14240: Improper Neutralization of Input During Web Page Generation

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

CVE-2020-4097: Buffer Copy without Checking Size of Input

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a...

HCL Notes Email Compose Buffer Overflow Vulnerability

HCL Notes is a local e-mail client. A security vulnerability exists in HCL Notes Email Compose, which can be exploited by an attacker to crash HCL Notes or execute attacker-controlled code on the client...

Unspecified Vulnerability in HCL AppScan (CNVD-2021-13713)

HCL AppScan is a suite of dynamic analysis testing tools from HCL India. The tool is mainly used for web security testing. A security vulnerability exists in HCL AppScan Enterprise that stems from the use of broken or risky encryption algorithms to store REST API user details. No detailed...

Unspecified Vulnerability in HCL AppScan

HCL AppScan is a suite of dynamic analysis testing tools from HCL India. The tool is mainly used for web security testing. A security vulnerability exists in HCL AppScan Enterprise, which stems from the lack of HTTP Strict-Transport-Security header in the Management section of the Enterprise...

HCL Digital Experience Cross-Site Scripting Vulnerability

HCL Technologies Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies India. A cross-site scripting vulnerability exists in HCL Digital Experience version 8.5, 9.0, 9.5. The vulnerability stems from the lack of proper validation of...