Vulnerabilities > Hcltech > Notes > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-12-02 CVE-2020-4102 Classic Buffer Overflow vulnerability in Hcltech Notes
HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input.
local
low complexity
hcltech CWE-120
6.7
2020-11-05 CVE-2020-4097 Classic Buffer Overflow vulnerability in Hcltech Notes
In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow.
low complexity
hcltech CWE-120
6.8
2020-11-05 CVE-2020-14240 Cross-site Scripting vulnerability in Hcltech Notes
HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability.
network
low complexity
hcltech CWE-79
6.1
2020-06-26 CVE-2020-4089 Unspecified vulnerability in Hcltech Notes 10.0/11.0/9.0
HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol.
network
low complexity
hcltech
6.5