7.4

CVE-2022-27547

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Hcl Inotes Version9.0.1 Update-
Hcltech ≫ Hcl Inotes Version9.0.1 Updatefixpack_10
Hcltech ≫ Hcl Inotes Version9.0.1 Updatefixpack_3
Hcltech ≫ Hcl Inotes Version9.0.1 Updatefixpack_4
Hcltech ≫ Hcl Inotes Version9.0.1 Updatefixpack_5
Hcltech ≫ Hcl Inotes Version9.0.1 Updatefixpack_6
Hcltech ≫ Hcl Inotes Version9.0.1 Updatefixpack_7
Hcltech ≫ Hcl Inotes Version9.0.1 Updatefixpack_8
Hcltech ≫ Hcl Inotes Version9.0.1 Updatefixpack_9
Hcltech ≫ Hcl Inotes Version10.0
Hcltech ≫ Hcl Inotes Version10.0.1 Update-
Hcltech ≫ Hcl Inotes Version10.0.1 Updatefixpack_1
Hcltech ≫ Hcl Inotes Version10.0.1 Updatefixpack_2
Hcltech ≫ Hcl Inotes Version10.0.1 Updatefixpack_3
Hcltech ≫ Hcl Inotes Version10.0.1 Updatefixpack_4
Hcltech ≫ Hcl Inotes Version10.0.1 Updatefixpack_5
Hcltech ≫ Hcl Inotes Version10.0.1 Updatefixpack_6
Hcltech ≫ Hcl Inotes Version10.0.1 Updatefixpack_7
Hcltech ≫ Hcl Inotes Version10.0.1 Updatefixpack_8
Hcltech ≫ Hcl Inotes Version11.0
Hcltech ≫ Hcl Inotes Version11.0.1 Update-
Hcltech ≫ Hcl Inotes Version11.0.1 Updatefixpack_1
Hcltech ≫ Hcl Inotes Version11.0.1 Updatefixpack_2
Hcltech ≫ Hcl Inotes Version11.0.1 Updatefixpack_3
Hcltech ≫ Hcl Inotes Version11.0.1 Updatefixpack_4
Hcltech ≫ Hcl Inotes Version11.0.1 Updatefixpack_5
Hcltech ≫ Hcl Inotes Version12.0
Hcltech ≫ Hcl Inotes Version12.0.1 Update-
Hcltech ≫ Hcl Inotes Version12.0.1 Updatefixpack_1
Hcltech ≫ Domino Version9.0
Hcltech ≫ Domino Version9.0.1 Update-
Hcltech ≫ Domino Version9.0.1 Updatefixpack_10
Hcltech ≫ Domino Version9.0.1 Updatefixpack_3
Hcltech ≫ Domino Version9.0.1 Updatefixpack_4
Hcltech ≫ Domino Version9.0.1 Updatefixpack_5
Hcltech ≫ Domino Version9.0.1 Updatefixpack_6
Hcltech ≫ Domino Version9.0.1 Updatefixpack_7
Hcltech ≫ Domino Version9.0.1 Updatefixpack_8
Hcltech ≫ Domino Version9.0.1 Updatefixpack_9
Hcltech ≫ Domino Version10.0
Hcltech ≫ Domino Version10.0.1 Update-
Hcltech ≫ Domino Version10.0.1 Updatefixpack_1
Hcltech ≫ Domino Version10.0.1 Updatefixpack_2
Hcltech ≫ Domino Version10.0.1 Updatefixpack_3
Hcltech ≫ Domino Version10.0.1 Updatefixpack_4
Hcltech ≫ Domino Version10.0.1 Updatefixpack_5
Hcltech ≫ Domino Version10.0.1 Updatefixpack_6
Hcltech ≫ Domino Version10.0.1 Updatefixpack_7
Hcltech ≫ Domino Version10.0.1 Updatefixpack_8
Hcltech ≫ Domino Version11.0
Hcltech ≫ Domino Version11.0.1 Update-
Hcltech ≫ Domino Version11.0.1 Updatefixpack_1
Hcltech ≫ Domino Version11.0.1 Updatefixpack_2
Hcltech ≫ Domino Version11.0.1 Updatefixpack_3
Hcltech ≫ Domino Version11.0.1 Updatefixpack_4
Hcltech ≫ Domino Version11.0.1 Updatefixpack_5
Hcltech ≫ Domino Version12.0
Hcltech ≫ Domino Version12.0.1 Update-
Hcltech ≫ Domino Version12.0.1 Updatefixpack_1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.539
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.4 2.8 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
psirt@hcl.com 6.1 1.6 4
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.