Hcltech Notes 9.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:notes:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductNotes (8f37f858-7231-5391-ba6c-a21e67937a5f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4089 vulnerable 2026-06-08 05:25:58.857122 Details available
HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected.
Published: 2020-06-26T22:55:30.000Z
Updated: 2024-08-04T07:52:20.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14258 vulnerable 2026-06-08 05:19:22.806828 Details available
HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected.
Published: 2020-11-21T17:24:31.000Z
Updated: 2024-08-04T12:39:36.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14232 vulnerable 2026-06-08 05:19:22.748886 Details available
A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow the attacker to crash the program or inject code into the system which would execute with the privileges of the currently logged in user.
Published: 2020-12-17T23:59:59.000Z
Updated: 2024-08-04T12:39:36.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14224 vulnerable 2026-06-08 05:19:22.725123 Details available
A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the Notes application or inject code into the system which would execute with the privileges of the currently logged-in user.
Published: 2020-12-18T22:11:54.000Z
Updated: 2024-08-04T12:39:36.204Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.