HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: HCL
Published: 2020-11-05T16:20:20
Updated: 2024-08-04T12:39:36.225Z
Reserved: 2020-06-17T00:00:00
Link: CVE-2020-14240
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-11-05T17:15:12.367
Modified: 2024-11-21T05:02:54.337
Link: CVE-2020-14240
Redhat
No data.