CVE-2020-14258

CVE-2020-14258 affects HCL Notes (versions 9, 10, 11). A Denial of Service arises from improper validation of user-supplied input, enabling a remote, unauthenticated attacker to hang the client via a specially crafted email message. Affected components and exact root cause are described consisten...

CVE-2020-14234

CVE-2020-14234 affects HCL Domino servers. The DoS stems from improper validation of user-supplied input, potentially crashing the server. Affected versions are before 9.0.1 FP10 IF6 and before 10.0.1. The connected sources confirm the same description; no exploitation or precise remediation deta...

CVE-2020-14234

HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability to crash the server. Versions previous to release 9.0.1 FP10 IF6 and release 10.0.1 are affected...

CVE-2020-14230: Improper Input Validation

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the server. Versions previous to releases 9.0.1 FP10 IF6, 10.0.1...

PT-2020-13953

Name of the Vulnerable Software and Affected Versions HCL Notes versions 9 through 11 Description The issue is caused by improper validation of user-supplied input, leading to a Denial of Service vulnerability. A remote unauthenticated attacker could exploit this vulnerability using a...

PT-2020-13945

Name of the Vulnerable Software and Affected Versions HCL Domino versions prior to 9.0.1 FP10 IF6 HCL Domino versions prior to 10.0.1 FP5 HCL Domino versions prior to 11.0.1 Description HCL Domino is susceptible to a Denial of Service issue caused by improper validation of user-supplied input. A...

CVE-2020-14234: Improper Input Validation

HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability to crash the server. Versions previous to release 9.0.1 FP10 IF6 and release 10.0.1 are affected...

CVE-2020-14258: Improper Input Validation

HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected...

PT-2020-13948

Name of the Vulnerable Software and Affected Versions HCL Domino versions prior to 9.0.1 FP10 IF6 and prior to 10.0.1 Description The issue is related to a Denial of Service vulnerability due to improper validation of user-supplied input. This could potentially allow an attacker to crash the...

HCL Technologies Domino 输入验证错误漏洞

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP5, and prior to 11.0.1. The vulnerability stems from improper validation of user-supplied input. A remote, unauthenticated attacker...

HCL Software HCL Notes 输入验证错误漏洞

HCL Notes is an enterprise email client. A denial of service vulnerability exists in HCL Notes 9, 10, and 11. The vulnerability stems from improper validation of user-supplied input. A remote, unauthenticated attacker can exploit the vulnerability via a specially crafted email to cause the client...

HCL Technologies Domino 输入验证错误漏洞

HCL Domino is a server for collaborative client-server software platforms. A denial of service vulnerability exists in HCL Domino versions 9.0.1 FP10 IF6, prior to 10.0.1. The vulnerability stems from improper validation of user-supplied input. An attacker could exploit the vulnerability to cause...

CVE-2020-14240

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

CVE-2020-14222

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

CVE-2020-14222

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

CVE-2020-4097

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a...

CVE-2020-4097

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a...

CVE-2020-14240

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

Cross site scripting

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting XSS vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or stea...

Cross site scripting

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...