Not rated
CVE-2020-14240 HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored…
Description
HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Notes | Versions not published |
Other CVEs of HCL Notes
The 6 CVEs of HCL Notes →
CVE-2020-14224
A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an…
Not rated
CVE-2020-14232
A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated…
Not rated
CVE-2020-14268
A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by…
Not rated
CVE-2020-4102
HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input
Not rated