VYPR
← All advisories
High severity7.5NVD Advisory· Published Nov 21, 2020· Updated Jun 17, 2026

CVE-2020-14230

CVE-2020-14230

Description

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the server. Versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1 are affected.

Affected products

15
  • HCLTech/Domino13 versions
    cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*range: <9.0.1
    • cpe:2.3:a:hcltech:domino:10.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_10_interim_fix_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_10_interim_fix_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_8:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_8_interim_fix_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_8_interim_fix_2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_8_interim_fix_3:*:*:*:*:*:*
  • HCL Software/Dominollm-create
    Range: <9.0.1 FP10 IF6, <10.0.1 FP5, <11.0.1
  • HCL/HCL Dominov5
    Range: versions previous to releases 9.0.1 FP10 IF6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.