9.8

CVE-2022-44755

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.  This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44751.  This vulnerability applies to software previously licensed by IBM.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Notes Version9.0.1 Update-
Hcltech ≫ Notes Version9.0.1 Updatefp10
Hcltech ≫ Notes Version9.0.1 Updatefp10if1
Hcltech ≫ Notes Version9.0.1 Updatefp10if10
Hcltech ≫ Notes Version9.0.1 Updatefp10if2
Hcltech ≫ Notes Version9.0.1 Updatefp10if3
Hcltech ≫ Notes Version9.0.1 Updatefp10if4
Hcltech ≫ Notes Version9.0.1 Updatefp10if5
Hcltech ≫ Notes Version9.0.1 Updatefp10if6
Hcltech ≫ Notes Version9.0.1 Updatefp10if7
Hcltech ≫ Notes Version9.0.1 Updatefp10if8
Hcltech ≫ Notes Version9.0.1 Updatefp1if1
Hcltech ≫ Notes Version9.0.1 Updatefp1if2
Hcltech ≫ Notes Version9.0.1 Updatefp2if1
Hcltech ≫ Notes Version9.0.1 Updatefp2if2
Hcltech ≫ Notes Version9.0.1 Updatefp2if3
Hcltech ≫ Notes Version9.0.1 Updatefp2if4
Hcltech ≫ Notes Version9.0.1 Updatefp3if1
Hcltech ≫ Notes Version9.0.1 Updatefp3if2
Hcltech ≫ Notes Version9.0.1 Updatefp3if3
Hcltech ≫ Notes Version9.0.1 Updatefp3if4
Hcltech ≫ Notes Version9.0.1 Updatefp4if1
Hcltech ≫ Notes Version9.0.1 Updatefp4if2
Hcltech ≫ Notes Version9.0.1 Updatefp5if1
Hcltech ≫ Notes Version9.0.1 Updatefp5if2
Hcltech ≫ Notes Version9.0.1 Updatefp5if3
Hcltech ≫ Notes Version9.0.1 Updatefp7if1
Hcltech ≫ Notes Version9.0.1 Updatefp7if2
Hcltech ≫ Notes Version9.0.1 Updatefp8if1
Hcltech ≫ Notes Version9.0.1 Updatefp9if1
Hcltech ≫ Notes Version9.0.1 Updatefp9if2
Hcltech ≫ Notes Version10.0.1 Update-
Hcltech ≫ Notes Version10.0.1 Updatefp1
Hcltech ≫ Notes Version10.0.1 Updatefp2
Hcltech ≫ Notes Version10.0.1 Updatefp3
Hcltech ≫ Notes Version10.0.1 Updatefp4
Hcltech ≫ Notes Version10.0.1 Updatefp5
Hcltech ≫ Notes Version10.0.1 Updatefp6
Hcltech ≫ Notes Version10.0.1 Updatefp7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.54% 0.807
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
psirt@hcl.com 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.