CVE-2020-14240

hcltech notes

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-14240

Katalog CVE

CVSS 6.1 · Medium EPSS 0,67%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada hcltech notes. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.

Rincian

Terbit di NVD
5 November 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,67% peluang dieksploitasi; lebih tinggi dari 50,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
hcltech notes Versi 9.0 hingga 9.0.1
hcltech notes Versi 10.0 hingga 10.0.1
hcltech notes Versi 11.0 hingga 11.0.1
hcltech notes Versi 9.0.1 fp10
hcltech notes Versi 9.0.1 fp10if1
hcltech notes Versi 9.0.1 fp10if2
hcltech notes Versi 9.0.1 fp10if3
hcltech notes Versi 9.0.1 fp10if4
hcltech notes Versi 9.0.1 fp10if5
hcltech notes Versi 9.0.1 fp10if6
hcltech notes Versi 9.0.1 fp10if7
hcltech notes Versi 9.0.1 fp1if1
hcltech notes Versi 9.0.1 fp1if2
hcltech notes Versi 9.0.1 fp2if1
hcltech notes Versi 9.0.1 fp2if2
hcltech notes Versi 9.0.1 fp2if3
hcltech notes Versi 9.0.1 fp2if4
hcltech notes Versi 9.0.1 fp3if1
hcltech notes Versi 9.0.1 fp3if2
hcltech notes Versi 9.0.1 fp3if3
hcltech notes Versi 9.0.1 fp3if4
hcltech notes Versi 9.0.1 fp4if1
hcltech notes Versi 9.0.1 fp4if2
hcltech notes Versi 9.0.1 fp5if1
hcltech notes Versi 9.0.1 fp5if2
hcltech notes Versi 9.0.1 fp5if3
hcltech notes Versi 9.0.1 fp7if1
hcltech notes Versi 9.0.1 fp7if2
hcltech notes Versi 9.0.1 fp8if1
hcltech notes Versi 9.0.1 fp9if1
hcltech notes Versi 9.0.1 fp9if2
hcltech notes Versi 10.0.1 fp1
hcltech notes Versi 10.0.1 fp2
hcltech notes Versi 10.0.1 fp3
hcltech notes Versi 10.0.1 fp4
hcltech notes Versi 10.0.1 fp5

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.