VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Nov 5, 2020· Updated Jun 17, 2026

CVE-2020-4097

CVE-2020-4097

Description

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client.

Affected products

40
  • HCLTech/Notes39 versions
    cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*+ 38 more
    • cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*range: >=9.0,<=9.0.1
    • cpe:2.3:a:hcltech:notes:10.0.0:fp1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.0:fp2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.0:fp3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.0:fp4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.0:fp5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if6:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if7:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp1if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp1if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp4if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp4if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp7if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp7if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp8if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp9if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp9if2:*:*:*:*:*:*
  • HCL Software/Notes clientllm-create
    Range: <9.0.1 FP10 IF8, <10.0.1 FP6, <11.0.1 FP1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.