7.4

CVE-2022-27547

HCL iNotes is susceptible to a link to non-existent domain vulnerability.

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Hcl Inotes Version 9.0.1 Update -
Hcltech ≫ Hcl Inotes Version 9.0.1 Update fixpack_10
Hcltech ≫ Hcl Inotes Version 9.0.1 Update fixpack_3
Hcltech ≫ Hcl Inotes Version 9.0.1 Update fixpack_4
Hcltech ≫ Hcl Inotes Version 9.0.1 Update fixpack_5
Hcltech ≫ Hcl Inotes Version 9.0.1 Update fixpack_6
Hcltech ≫ Hcl Inotes Version 9.0.1 Update fixpack_7
Hcltech ≫ Hcl Inotes Version 9.0.1 Update fixpack_8
Hcltech ≫ Hcl Inotes Version 9.0.1 Update fixpack_9
Hcltech ≫ Hcl Inotes Version 10.0
Hcltech ≫ Hcl Inotes Version 10.0.1 Update -
Hcltech ≫ Hcl Inotes Version 10.0.1 Update fixpack_1
Hcltech ≫ Hcl Inotes Version 10.0.1 Update fixpack_2
Hcltech ≫ Hcl Inotes Version 10.0.1 Update fixpack_3
Hcltech ≫ Hcl Inotes Version 10.0.1 Update fixpack_4
Hcltech ≫ Hcl Inotes Version 10.0.1 Update fixpack_5
Hcltech ≫ Hcl Inotes Version 10.0.1 Update fixpack_6
Hcltech ≫ Hcl Inotes Version 10.0.1 Update fixpack_7
Hcltech ≫ Hcl Inotes Version 10.0.1 Update fixpack_8
Hcltech ≫ Hcl Inotes Version 11.0
Hcltech ≫ Hcl Inotes Version 11.0.1 Update -
Hcltech ≫ Hcl Inotes Version 11.0.1 Update fixpack_1
Hcltech ≫ Hcl Inotes Version 11.0.1 Update fixpack_2
Hcltech ≫ Hcl Inotes Version 11.0.1 Update fixpack_3
Hcltech ≫ Hcl Inotes Version 11.0.1 Update fixpack_4
Hcltech ≫ Hcl Inotes Version 11.0.1 Update fixpack_5
Hcltech ≫ Hcl Inotes Version 12.0
Hcltech ≫ Hcl Inotes Version 12.0.1 Update -
Hcltech ≫ Hcl Inotes Version 12.0.1 Update fixpack_1
Hcltech ≫ Domino Version 9.0
Hcltech ≫ Domino Version 9.0.1 Update -
Hcltech ≫ Domino Version 9.0.1 Update fixpack_10
Hcltech ≫ Domino Version 9.0.1 Update fixpack_3
Hcltech ≫ Domino Version 9.0.1 Update fixpack_4
Hcltech ≫ Domino Version 9.0.1 Update fixpack_5
Hcltech ≫ Domino Version 9.0.1 Update fixpack_6
Hcltech ≫ Domino Version 9.0.1 Update fixpack_7
Hcltech ≫ Domino Version 9.0.1 Update fixpack_8
Hcltech ≫ Domino Version 9.0.1 Update fixpack_9
Hcltech ≫ Domino Version 10.0
Hcltech ≫ Domino Version 10.0.1 Update -
Hcltech ≫ Domino Version 10.0.1 Update fixpack_1
Hcltech ≫ Domino Version 10.0.1 Update fixpack_2
Hcltech ≫ Domino Version 10.0.1 Update fixpack_3
Hcltech ≫ Domino Version 10.0.1 Update fixpack_4
Hcltech ≫ Domino Version 10.0.1 Update fixpack_5
Hcltech ≫ Domino Version 10.0.1 Update fixpack_6
Hcltech ≫ Domino Version 10.0.1 Update fixpack_7
Hcltech ≫ Domino Version 10.0.1 Update fixpack_8
Hcltech ≫ Domino Version 11.0
Hcltech ≫ Domino Version 11.0.1 Update -
Hcltech ≫ Domino Version 11.0.1 Update fixpack_1
Hcltech ≫ Domino Version 11.0.1 Update fixpack_2
Hcltech ≫ Domino Version 11.0.1 Update fixpack_3
Hcltech ≫ Domino Version 11.0.1 Update fixpack_4
Hcltech ≫ Domino Version 11.0.1 Update fixpack_5
Hcltech ≫ Domino Version 12.0
Hcltech ≫ Domino Version 12.0.1 Update -
Hcltech ≫ Domino Version 12.0.1 Update fixpack_1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.386
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.4 2.8 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
psirt@hcl.com 6.1 1.6 4
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100212
Vendor Advisory