csirt@kutim:~/threat-intel/cve/CVE-2022-44751

Katalog CVE

CVSS 7.8 · High EPSS 0,69%

Kerentanan Out-of-bounds Write pada hcltech notes. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44755.  This vulnerability applies to software previously licensed by IBM.

Rincian

Terbit di NVD
19 Desember 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,69% peluang dieksploitasi; lebih tinggi dari 51,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
hcltech notes Versi 9.0.1
hcltech notes Versi 9.0.1 fp10
hcltech notes Versi 9.0.1 fp10if1
hcltech notes Versi 9.0.1 fp10if10
hcltech notes Versi 9.0.1 fp10if2
hcltech notes Versi 9.0.1 fp10if3
hcltech notes Versi 9.0.1 fp10if4
hcltech notes Versi 9.0.1 fp10if5
hcltech notes Versi 9.0.1 fp10if6
hcltech notes Versi 9.0.1 fp10if7
hcltech notes Versi 9.0.1 fp10if8
hcltech notes Versi 9.0.1 fp1if1
hcltech notes Versi 9.0.1 fp1if2
hcltech notes Versi 9.0.1 fp2if1
hcltech notes Versi 9.0.1 fp2if2
hcltech notes Versi 9.0.1 fp2if3
hcltech notes Versi 9.0.1 fp2if4
hcltech notes Versi 9.0.1 fp3if1
hcltech notes Versi 9.0.1 fp3if2
hcltech notes Versi 9.0.1 fp3if3
hcltech notes Versi 9.0.1 fp3if4
hcltech notes Versi 9.0.1 fp4if1
hcltech notes Versi 9.0.1 fp4if2
hcltech notes Versi 9.0.1 fp5if1
hcltech notes Versi 9.0.1 fp5if2
hcltech notes Versi 9.0.1 fp5if3
hcltech notes Versi 9.0.1 fp7if1
hcltech notes Versi 9.0.1 fp7if2
hcltech notes Versi 9.0.1 fp8if1
hcltech notes Versi 9.0.1 fp9if1
hcltech notes Versi 9.0.1 fp9if2
hcltech notes Versi 10.0.1
hcltech notes Versi 10.0.1 fp1
hcltech notes Versi 10.0.1 fp2
hcltech notes Versi 10.0.1 fp3
hcltech notes Versi 10.0.1 fp4
hcltech notes Versi 10.0.1 fp5
hcltech notes Versi 10.0.1 fp6
hcltech notes Versi 10.0.1 fp7

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.