Описание
HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system.
Уязвимые конфигурации
Конфигурация 1Версия от 9.0.0 (включая) до 9.0.1 (включая)
Одно из
cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:-:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp4:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:10.0.1:fp5:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:11.0:*:*:*:*:*:*:*
cpe:2.3:a:hcltech:notes:11.0.1:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.00051
Низкий
6.7 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-120
Связанные уязвимости
github
больше 3 лет назад
HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system.
EPSS
Процентиль: 16%
0.00051
Низкий
6.7 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-120