VulnerabilityModified

CVE-2020-4089

HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol.

MEDIUM 6.5EPSS 1.16%

Does this matter?

Lower severity and a low EPSS score (1.16%). Track it; it rarely justifies an emergency change on its own.

Description

HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS: 1.16% probability · 65th percentile
CISA KEV: Not listed
Affected: hcltech/notes
Source: psirt@hcl.com

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080343Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080343Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.