CVE-2020-14230

Published: Nov 21, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the server. Versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1 are affected.

Affected (15)

Products: Hcltech: Domino

Hcltech

1 product

Domino

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Hcltech Domino	Before 9.0.1
Hcltech Domino	From 10.0.0 to 10.0.1
Hcltech Domino	From 11.0.0 to 11.0.1
Hcltech Domino	Version 10.0.1
Hcltech Domino	Version 10.0.1 fix_pack_1
Hcltech Domino	Version 10.0.1 fix_pack_2
Hcltech Domino	Version 10.0.1 fix_pack_3
Hcltech Domino	Version 10.0.1 fix_pack_4
Hcltech Domino	Version 9.0.1
Hcltech Domino	Version 9.0.1 feature_pack_10_interim_fix_3
Hcltech Domino	Version 9.0.1 feature_pack_10_interim_fix_4
Hcltech Domino	Version 9.0.1 feature_pack_8
Hcltech Domino	Version 9.0.1 feature_pack_8_interim_fix_1
Hcltech Domino	Version 9.0.1 feature_pack_8_interim_fix_2
Hcltech Domino	Version 9.0.1 feature_pack_8_interim_fix_3

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085303

Source: psirt@hcl.com

PatchVendor Advisory

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085303

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.