Vulnerability · Published Nov 21, 2020 · Assigned by HCL
CVE-2020-14230
High 7.5
In plain English
A high-severity security flaw in HCL Domino from HCL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.3%top 30.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the server. Versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1 are affected.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL | HCL Domino | versions previous to releases 9.0.1 FP10 IF610.0.1 FP511.0.1 |
References
- https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085303 x_refsource_CONFIRM