Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-14240

Опубликовано: 05 нояб. 2020
Источник: nvd
CVSS3: 6.1
CVSS2: 4.3
EPSS Низкий

Описание

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*
Версия от 9.0 (включая) до 9.0.1 (включая)
cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*
Версия от 10.0 (включая) до 10.0.1 (включая)
cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*
Версия от 11.0 (включая) до 11.0.1 (включая)
cpe:2.3:a:hcltech:notes:9.0.1:fp10:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp10if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp10if2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp10if3:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp10if4:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp10if5:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp10if6:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp10if7:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp1if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp1if2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp2if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp2if2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp2if3:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp2if4:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp3if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp3if2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp3if3:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp3if4:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp4if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp4if2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp5if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp5if2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp5if3:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp7if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp7if2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp8if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp9if1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:9.0.1:fp9if2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp4:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp5:*:*:*:*:*:*

EPSS

Процентиль: 55%
0.00322
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github логотип

GHSA-jwjh-8w87-hw74

github
больше 3 лет назад

HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.

EPSS

Процентиль: 55%
0.00322
Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79