What is CVE-2020-14225?

CVE-2020-14225 is a medium-severity vulnerability in Hcltech Hcl_inotes. CVSS score: 6.5/10. Published 2020-12-21.

How severe is CVE-2020-14225?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Hcltech Hcl_inotes

CVE-2020-14225

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as cr…

EPSS: 0.013 (65.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.

Affected products

Hcltech Hcl_inotes — versions 10.0.1, 11.0.0
Hcltechsw Hcl_inotes — versions 9.0.1
N/a Hcl Inotes — versions versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1

References

psirt@hcl.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-14225?: CVE-2020-14225 is a medium-severity vulnerability in Hcltech Hcl_inotes. CVSS score: 6.5/10. Published 2020-12-21.
How severe is CVE-2020-14225?: Medium severity. CVSS v3 base score is 6.5 out of 10.