VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Nov 5, 2020· Updated Jun 17, 2026

CVE-2020-14240

CVE-2020-14240

Description

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.

Affected products

35
  • HCLTech/Notes34 versions
    cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*+ 33 more
    • cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*range: >=9.0,<=9.0.1
    • cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if6:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if7:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp1if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp1if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp4if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp4if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp7if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp7if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp8if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp9if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp9if2:*:*:*:*:*:*
  • HCL Software/Notesllm-create
    Range: <9.0.1 FP10 IF8, <10.0.1 FP6, <11.0.1 FP1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.