CVE-2020-14270

Published: Dec 22, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability to obtain information about the XPages software running on the Domino server.

Affected (8)

Products: Hcltech: Domino

Hcltech

1 product

Domino

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Hcltech Domino	From 9.0.0 to 10.0.0
Hcltech Domino	Version 10.0.1
Hcltech Domino	Version 10.0.1 fix_pack_1
Hcltech Domino	Version 10.0.1 fix_pack_2
Hcltech Domino	Version 10.0.1 fix_pack_3
Hcltech Domino	Version 10.0.1 fix_pack_4
Hcltech Domino	Version 11.0.0
Hcltech Domino	Version 11.0.1

Related CWEs

CWE-755

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (2)

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085881

Source: psirt@hcl.com

PatchVendor Advisory

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085881

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.