CVE-2020-14258

HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@hcl.com

Published

2020-11-21

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Hcl Notes (Hcl)
• Notes (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085304