HCL Software

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.

HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView.

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.

A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow.

HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input.

A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information.

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability.

HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability.

HCL Domino is affected by an Insufficient Access Control vulnerability.

HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request.

HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API.

HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability to crash the server.

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input.

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.

HCL iNotes is susceptible to a link to non-existent domain vulnerability.

In some configuration scenarios, the Domino server host name can be exposed.

HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content.

"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack.

Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action on the People & Groups tab in the Domino® Administrator are secured using a cryptographically weak hash algorit…

HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input.

HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service.

HCL Domino is susceptible to an information disclosure vulnerability.