6.1

CVE-2020-14240

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Notes Version >= 9.0 <= 9.0.1
Hcltech ≫ Notes Version >= 10.0 <= 10.0.1
Hcltech ≫ Notes Version >= 11.0 <= 11.0.1
Hcltech ≫ Notes Version 9.0.1 Update fp10
Hcltech ≫ Notes Version 9.0.1 Update fp10if1
Hcltech ≫ Notes Version 9.0.1 Update fp10if2
Hcltech ≫ Notes Version 9.0.1 Update fp10if3
Hcltech ≫ Notes Version 9.0.1 Update fp10if4
Hcltech ≫ Notes Version 9.0.1 Update fp10if5
Hcltech ≫ Notes Version 9.0.1 Update fp10if6
Hcltech ≫ Notes Version 9.0.1 Update fp10if7
Hcltech ≫ Notes Version 9.0.1 Update fp1if1
Hcltech ≫ Notes Version 9.0.1 Update fp1if2
Hcltech ≫ Notes Version 9.0.1 Update fp2if1
Hcltech ≫ Notes Version 9.0.1 Update fp2if2
Hcltech ≫ Notes Version 9.0.1 Update fp2if3
Hcltech ≫ Notes Version 9.0.1 Update fp2if4
Hcltech ≫ Notes Version 9.0.1 Update fp3if1
Hcltech ≫ Notes Version 9.0.1 Update fp3if2
Hcltech ≫ Notes Version 9.0.1 Update fp3if3
Hcltech ≫ Notes Version 9.0.1 Update fp3if4
Hcltech ≫ Notes Version 9.0.1 Update fp4if1
Hcltech ≫ Notes Version 9.0.1 Update fp4if2
Hcltech ≫ Notes Version 9.0.1 Update fp5if1
Hcltech ≫ Notes Version 9.0.1 Update fp5if2
Hcltech ≫ Notes Version 9.0.1 Update fp5if3
Hcltech ≫ Notes Version 9.0.1 Update fp7if1
Hcltech ≫ Notes Version 9.0.1 Update fp7if2
Hcltech ≫ Notes Version 9.0.1 Update fp8if1
Hcltech ≫ Notes Version 9.0.1 Update fp9if1
Hcltech ≫ Notes Version 9.0.1 Update fp9if2
Hcltech ≫ Notes Version 10.0.1 Update fp1
Hcltech ≫ Notes Version 10.0.1 Update fp2
Hcltech ≫ Notes Version 10.0.1 Update fp3
Hcltech ≫ Notes Version 10.0.1 Update fp4
Hcltech ≫ Notes Version 10.0.1 Update fp5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.67% 0.483
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084789
Vendor Advisory