VYPR
← All advisories
Medium severity4.6NVD Advisory· Published May 6, 2022· Updated Jun 17, 2026

CVE-2021-27760

CVE-2021-27760

Description

An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code.

Affected products

8
  • HCLTech/Hcl Inotes6 versions
    cpe:2.3:a:hcltech:hcl_inotes:11.0.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack4:*:*:*:*:*:*
  • HCL Software/Notesllm-create
    Range: 11.0 - 11.0.1 FP4
  • HCL Software/iNotescpe-rescue
    Range: 11.0 - 11.0.1 FP4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.