Browse CVEs

MEDIUM 5.9 CVE-2020-4126 HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by in… Hcl Inotes 10.0.1 / 11.0.1+ Fix from $1,6002020-12-01 MEDIUM 5.3 CVE-2020-4129 HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to m… Hcl Domino 9.0.1 / 10.0.1+ Fix from $1,6002020-12-01 MEDIUM 6.5 CVE-2020-4127 HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under anothe… Hcl Domino 9.0.1 / 10.0.1+ Fix from $1,6002020-11-30 HIGH 7.5 CVE-2020-14230 HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacke… Domino 9.0.1 / 10.0.1+ Fix from $1,9502020-11-21 HIGH 7.5 CVE-2020-14234 HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the … Domino 9.0.1 / 10.0.1+ Fix from $1,9502020-11-21 HIGH 7.5 CVE-2020-14258 HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker… Notes Patch available Fix from $1,9502020-11-21 MEDIUM 6.8 CVE-2020-4097 In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to… Notes after 11.0.1 Fix from $1,6002020-11-05 MEDIUM 6.1 CVE-2020-14222 HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS,… Hcl Digital Experience Mitigation only Fix from $1,6002020-11-05 MEDIUM 6.1 CVE-2020-14240 HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability… Notes after 11.0.1 Fix from $1,6002020-11-05 HIGH 7.5 CVE-2019-4326 "HCL AppScan Enterprise security rules update administration section of the web application console is missing HTTP Strict-Transport-Security Header." Appscan after 10.0.0 Fix from $1,9502020-10-06 MEDIUM 5.3 CVE-2019-4325 "HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API user details." Appscan after 10.0.1 Fix from $1,6002020-10-06 MEDIUM 6.1 CVE-2020-14223 HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persiste… Digital Experience Patch available Fix from $1,6002020-10-01 MEDIUM 5.4 CVE-2020-4104 HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a malicious scr… Bigfix Webui Mitigation only Fix from $1,6002020-07-17 MEDIUM 5.4 CVE-2019-4091 "HCL Marketing Platform is vulnerable to cross-site scripting during addition of new users and also while searching for users in Dashboard, potential… Marketing Campaign 10.1.0.4 / 11.1.0.3+ Fix from $1,6002020-07-17 MEDIUM 5.4 CVE-2019-4090 "HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field." Marketing Campaign 10.1.0.3 / 11.1.0.2+ Fix from $1,6002020-07-17 MEDIUM 6.0 CVE-2020-4095 "BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative privileges can use a pr… Bigfix Platform after 9.5.15 Fix from $1,6002020-07-16 MEDIUM 6.1 CVE-2019-4324 "HCL AppScan Enterprise is susceptible to Cross-Site Scripting while importing a specially crafted test policy." Appscan after 10.0.0 Fix from $1,6002020-07-07 MEDIUM 5.9 CVE-2017-1712 "A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive informat… Domino 9.0.1+ Fix from $1,6002020-07-01 MEDIUM 6.5 CVE-2020-4089 HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in fil… Notes Mitigation only Fix from $1,6002020-06-26 CRITICAL 9.8 CVE-2020-4101 "HCL Digital Experience is susceptible to Server Side Request Forgery." Hcl Digital Experience Mitigation only Fix from $2,3002020-06-11 MEDIUM 5.3 CVE-2020-4092 "If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not currently… Hcl Nomad Mitigation only Fix from $1,6002020-05-06 MEDIUM 6.1 CVE-2019-4209 HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks. Connections Patch available Fix from $1,6002020-05-01 MEDIUM 6.5 CVE-2020-4085 "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user." Connections Mitigation only Fix from $1,6002020-04-22 HIGH 7.5 CVE-2019-4327 "HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get unauthorized access to application's encrypted files." Appscan after 9.0.3.14 Fix from $1,9502020-04-21 CRITICAL 9.8 CVE-2019-4393 HCL AppScan Standard is vulnerable to excessive authorization attempts Appscan after 10.0.0 Fix from $2,3002020-04-07 HIGH 8.2 CVE-2019-4391 HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data Appscan after 9.0.3.14 Fix from $1,9502020-04-07 MEDIUM 5.4 CVE-2020-4084 HCL Connections v5.5, v6.0, and v6.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th… Connections Patch available Fix from $1,6002020-03-09 MEDIUM 5.5 CVE-2020-4083 HCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose sensitive information via trace logs to a local user. Connections Patch available Fix from $1,6002020-03-05 MEDIUM 5.4 CVE-2020-4082 The HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker co… Connections Patch available Fix from $1,6002020-03-05 HIGH 8.4 CVE-2019-4301 BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTM… Self Service Application Mitigation only Fix from $1,9502020-02-28