VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 21, 2020· Updated Jun 17, 2026

CVE-2020-14225

CVE-2020-14225

Description

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack.

Affected products

12
  • HCLTech/Hcl Inotes6 versions
    cpe:2.3:a:hcltech:hcl_inotes:10.0.1:-:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.0:*:*:*:*:*:*:*
  • Hcltechsw/Hcl Inotes4 versions
    cpe:2.3:a:hcltechsw:hcl_inotes:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:hcltechsw:hcl_inotes:*:*:*:*:*:*:*:*range: <9.0.1
    • cpe:2.3:a:hcltechsw:hcl_inotes:9.0.1:fixpack_8:*:*:*:*:*:*
    • cpe:2.3:a:hcltechsw:hcl_inotes:9.0.1:fixpack_9:*:*:*:*:*:*
    • cpe:2.3:a:hcltechsw:hcl_inotes:9.0.1:fixpack_9_interim_fix_1:*:*:*:*:*:*
  • HCL/iNotesdescription
  • HCL Software/iNotesllm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.