Information disclosure

HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected...

CVE-2020-4089

CVE-2020-4089 affects HCL Notes (versions 9, 10, and 11). The vulnerability is an information leakage via the product’s support for the mailto protocol, which could cause files from the user’s filesystem or connected network filesystems to be leaked to a third party. Root cause details are not el...

CVE-2020-4089

HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected...

CVE-2020-4089: Undefined Security Weakness

HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected...

CVE-2020-4101

"HCL Digital Experience is susceptible to Server Side Request Forgery."...

CVE-2020-4101

"HCL Digital Experience is susceptible to Server Side Request Forgery."...

Server side request forgery (ssrf)

"HCL Digital Experience is susceptible to Server Side Request Forgery."...

CVE-2020-4101

"HCL Digital Experience is susceptible to Server Side Request Forgery."...

CVE-2020-4101

CVE-2020-4101 concerns HCL Digital Experience and is described in multiple connected records as a Server Side Request Forgery (SSRF) vulnerability. The documents corroborate the issue but do not provide concrete details on affected versions, root cause specifics, or available remediations within ...

CVE-2020-4101: Server-Side Request Forgery (SSRF)

"HCL Digital Experience is susceptible to Server Side Request Forgery."...

CVE-2020-4092

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expos...

Input validation

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expos...

CVE-2020-4092

CVE-2020-4092 describes a vulnerability in HCL Nomad for Android and iOS where, if port encryption is not enabled on the Domino Server, Nomad communicates in clear text. There is no user interface option to require encrypted communication with the Domino server, potentially exposing sensitive inf...

CVE-2020-4092

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expos...

CVE-2020-4092: Cleartext Transmission of Sensitive Information

"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently have a user interface option to change the setting to request an encrypted communication channel with the Domino server. This can potentially expos...

CVE-2019-4209

HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks...

CVE-2019-4209

HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks...

Open redirect

HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks...

CVE-2019-4209

HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks...

CVE-2019-4209

CVE-2019-4209 affects HCL Connections v5.5, v6.0, and v6.5 with an open redirect vulnerability. The connected documents confirm the issue enables phishing-like scenarios but do not provide technical details on the vulnerable component, root cause, affected submodules, or available remediations. N...