Hcl Inotes
Vendor:
First CVE: Dec 1, 2020 · Active for 5 years
7
Total CVEs
More Total CVEs than 85% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 32% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Hcl Inotes over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 1, 2020
5 years ago
Most Recent CVE
Aug 29, 2022
1,429 days ago
CVE Severity & Scoring
Hcl Inotes7 CVEs
71%
29%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (85.7%)
High1 (14.3%)
Unknown0 (0.0%)
User Interaction
None2 (28.6%)
Unknown0 (0.0%)
Required5 (71.4%)
Privileges Required
Low1 (14.3%)
High0 (0.0%)
None6 (85.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-27558HIGH HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak | Aug 29, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-27547HIGH HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as user | Aug 29, 2022 | 7.4 | 24 | NO | NO |
CVE-2022-27546MEDIUM HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote a | Aug 29, 2022 | 6.1 | 21 | NO | NO |
CVE-2021-27760MEDIUM An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat c | May 6, 2022 | 5.5 | 20 | NO | NO |
CVE-2020-14225MEDIUM HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick | Dec 21, 2020 | 6.5 | 18 | NO | NO |
CVE-2020-14271MEDIUM HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remote attacker could | Dec 18, 2020 | 6.1 | 17 | NO | NO |
CVE-2020-4126MEDIUM HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission wit | Dec 1, 2020 | 5.9 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Hcl Inotes
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.0.1 | 2 | 6.8 | 0.5% | 0 | 0 |
| 12.0.1 | 3 | 7.0 | 0.5% | 0 | 0 |
| 12.0 | 2 | 6.8 | 0.5% | 0 | 0 |
| 11.0.1 | 5 | 6.3 | 0.6% | 0 | 0 |
| 11.0.0 | 2 | 6.0 | 1.0% | 0 | 0 |
| 11.0 | 2 | 6.8 | 0.5% | 0 | 0 |
| 10.0.1 | 5 | 6.5 | 0.7% | 0 | 0 |
| 10.0 | 2 | 6.8 | 0.5% | 0 | 0 |