CVE-2020-14268
CRITICALHCL Notes 9-10 - Unauthenticated Stack Buffer Overflow via MIME Message Handling
Title source: llmDescription
A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the privileges of the client.
References (1)
Core 1
Core References
Patch, Vendor Advisory x_refsource_misc
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085762
Scores
CVSS v3
9.8
EPSS
0.0167
EPSS Percentile
82.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (3)
hcltech/notes
9.0.1 (29 CPE variants)
hcltech/notes
10.0.1 (4 CPE variants)
hcltech/notes
9.0 - 9.0.1
Published
Dec 14, 2020
Tracked Since
Feb 18, 2026