VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Dec 22, 2020· Updated Jun 17, 2026

CVE-2020-14270

CVE-2020-14270

Description

HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability to obtain information about the XPages software running on the Domino server.

Affected products

10
  • HCLTech/Domino8 versions
    cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*range: >=9.0.0,<=10.0.0
    • cpe:2.3:a:hcltech:domino:10.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fix_pack_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0.1:-:*:*:*:*:*:*
  • HCL/Dominodescription
  • HCL Software/Dominollm-create
    Range: 9, 10, 11

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.

CVE-2020-14270 · Medium · VYPR