VYPR
← All advisories
High severity8.3NVD Advisory· Published Aug 29, 2022· Updated Jun 17, 2026

CVE-2022-27546

CVE-2022-27546

Description

HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials.

Affected products

61
  • HCLTech/Domino30 versions
    cpe:2.3:a:hcltech:domino:10.0.1:-:*:*:*:*:*:*+ 29 more
    • cpe:2.3:a:hcltech:domino:10.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fixpack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fixpack_2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fixpack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fixpack_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fixpack_5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fixpack_6:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fixpack_7:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0.1:fixpack_8:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0.1:fixpack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0.1:fixpack_2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0.1:fixpack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0.1:fixpack_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0.1:fixpack_5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:12.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:12.0.1:fixpack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:fixpack_10:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:fixpack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:fixpack_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:fixpack_5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:fixpack_6:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:fixpack_7:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:fixpack_8:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0.1:fixpack_9:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:domino:9.0:*:*:*:*:*:*:*
  • HCLTech/Hcl Inotes29 versions
    cpe:2.3:a:hcltech:hcl_inotes:10.0.1:-:*:*:*:*:*:*+ 28 more
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_6:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_7:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_8:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:12.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:12.0.1:fixpack_1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_10:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_6:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_7:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_8:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_9:*:*:*:*:*:*
  • HCL Software/iNotesllm-create2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 9, 10, 11, 12

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.