5.3

CVE-2020-14270

HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability to obtain information about the XPages software running on the Domino server.

Data is provided by the National Vulnerability Database (NVD)
Hcltech ≫ Domino Version >= 9.0.0 <= 10.0.0
Hcltech ≫ Domino Version10.0.1 Update-
Hcltech ≫ Domino Version10.0.1 Updatefix_pack_1
Hcltech ≫ Domino Version10.0.1 Updatefix_pack_2
Hcltech ≫ Domino Version10.0.1 Updatefix_pack_3
Hcltech ≫ Domino Version10.0.1 Updatefix_pack_4
Hcltech ≫ Domino Version11.0.0
Hcltech ≫ Domino Version11.0.1 Update-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.32% 0.519
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.