Notes

Vendor:

First CVE: Jun 26, 2020 · Active for 6 years

11

Total CVEs

More Total CVEs than 89% of tracked products

5.5

Avg CVEs / Year

Higher CVE frequency than 89% of tracked products

7.8

Avg CVSS

Higher Avg CVSS than 63% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Notes over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jun 26, 2020

6 years ago

Most Recent CVE

Dec 19, 2022

1,314 days ago

CVE Severity & Scoring

Notes11 CVEs

36%

45%

18%

All CVEs352,427 CVEs

45%

40%

11%

MediumHighCritical

Attack Vector

Local4 (36.4%)

Network6 (54.5%)

Unknown0 (0.0%)

Physical1 (9.1%)

Adjacent Network0 (0.0%)

Attack Complexity

Low11 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None6 (54.5%)

Unknown0 (0.0%)

Required5 (45.5%)

Privileges Required

Low1 (9.1%)

High1 (9.1%)

None9 (81.8%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2020-14232HIGH A vulnerability in the input parameter handling of HCL Notes v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow t	Dec 18, 2020	8.8	27	NO	NO
CVE-2022-44753HIGH HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the applic	Dec 19, 2022	7.8	26	NO	NO
CVE-2022-44755HIGH HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the applica	Dec 19, 2022	7.8	25	NO	NO
CVE-2022-44751HIGH HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the applica	Dec 19, 2022	7.8	25	NO	NO
CVE-2020-14224CRITICAL A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This cou	Dec 18, 2020	9.8	24	NO	NO
CVE-2020-14268CRITICAL A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overf	Dec 14, 2020	9.8	24	NO	NO
CVE-2020-4097MEDIUM In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerabil	Nov 5, 2020	6.8	22	NO	NO
CVE-2020-14258HIGH HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerabili	Nov 21, 2020	7.5	19	NO	NO
CVE-2020-4102MEDIUM HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute	Dec 2, 2020	6.7	18	NO	NO
CVE-2020-14240MEDIUM HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vu	Nov 5, 2020	6.1	17	NO	NO

View all 11 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Notes

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
9.0.1	8	7.8	0.9%
9.0	4	8.2	1.5%
11.0.1	1	6.7	0.3%
11.0	3	6.9	0.9%
10.0.1	7	7.5	0.7%
10.0.0	1	6.8	0.3%
10.0	3	6.9	0.9%