Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_2:*:*:*:*:*:*

part: a version: 11.0.1 update: fixpack_2

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductHcl Inotes (cb96dbf5-0c73-5579-a390-f792c05f9c1f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27547 vulnerable 2026-06-03 14:46:47.458944 HCL iNotes is susceptible to a link to non-existent domain vulnerability.
MEDIUM (6.1)
HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.
Published: 2022-08-29T16:00:28.303Z
Updated: 2024-09-17T02:01:17.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27546 vulnerable 2026-06-03 14:46:47.439982 HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability
HIGH (8.3)
HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials.
Published: 2022-08-29T16:00:24.786Z
Updated: 2024-09-17T03:39:06.738Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.