by Kastro
Paper/Archive/CVE-2020-14268

CVE-2020-14268

HCL — A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated…

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 82.9.829 × 2016.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the privileges of the client.

Affected

ProductAffectedFixed inSource
HCL Notesv9, v10–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085762