CVE-2022-44754

hcltech domino

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-44754

Katalog CVE

CVSS 7.8 · High EPSS 0,69%

Kerentanan Out-of-bounds Write pada hcltech domino. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44750.  This vulnerability applies to software previously licensed by IBM.

Rincian

Terbit di NVD
19 Desember 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-787: Out-of-bounds Write
EPSS (30 hari)
0,69% peluang dieksploitasi; lebih tinggi dari 51,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
hcltech domino Versi 9.0
hcltech domino Versi 9.0.1
hcltech domino Versi 9.0.1 feature_pack_10_interim_fix_3
hcltech domino Versi 9.0.1 feature_pack_10_interim_fix_4
hcltech domino Versi 9.0.1 feature_pack_10_interim_fix_5
hcltech domino Versi 9.0.1 feature_pack_8
hcltech domino Versi 9.0.1 feature_pack_8_interim_fix_1
hcltech domino Versi 9.0.1 feature_pack_8_interim_fix_2
hcltech domino Versi 9.0.1 feature_pack_8_interim_fix_3
hcltech domino Versi 9.0.1 fixpack_10
hcltech domino Versi 9.0.1 fixpack_3
hcltech domino Versi 9.0.1 fixpack_4
hcltech domino Versi 9.0.1 fixpack_5
hcltech domino Versi 9.0.1 fixpack_6
hcltech domino Versi 9.0.1 fixpack_7
hcltech domino Versi 9.0.1 fixpack_8
hcltech domino Versi 9.0.1 fixpack_9

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.