Known vulnerabilities in HCL iNotes

Vendor: HCL Technologies
Software: HCL iNotes
Software CPE: cpe:2.3:a:hcl:hcl_inotes:*:*:*:*:*:*:*:*
Website: https://www.hcltechsw.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting HCL iNotes HCL iNotes is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-27546		 CWE-79 Low
No
No
 9.0.1 FP10 IF8, 10.0.1 FP8 IF1, 11.0.1 FP5 IF1, 12.0.1 FP1 IF1 30.08.2022 SB2022083008
#VU66825 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27547		 CWE-200 Medium
No
No
 9.0.1 FP10 IF8, 10.0.1 FP8 IF1, 11.0.1 FP5 IF1, 12.0.1 FP1 IF1 30.08.2022 SB2022083008
#VU66821 - Weak Password Requirements
CVE-2022-27558		 CWE-521 Medium
No
No
 12.0.1 FP1 IF1 30.08.2022 SB2022083008
#VU48750 - Exposure of sensitive information to an unauthorized actor
CVE-2020-4126		 CWE-200 Low
No
No
 10.0.1 FP6, 11.0.1 FP2 01.12.2020 SB2020120217