Lucene search

[email protected]CVE-2022-27547

HistoryAug 29, 2022 - 4:15 p.m.

CVE-2022-27547

2022-08-2916:15:08

CWE-601

[email protected]

web.nvd.nist.gov

hcl inotes

cve-2022-27547

vulnerability

link

non-existent domain

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.

Affected configurations

NVD

Node

hcltechhcl_inotesMatch9.0.1-

hcltechhcl_inotesMatch9.0.1fixpack_10

hcltechhcl_inotesMatch9.0.1fixpack_3

hcltechhcl_inotesMatch9.0.1fixpack_4

hcltechhcl_inotesMatch9.0.1fixpack_5

hcltechhcl_inotesMatch9.0.1fixpack_6

hcltechhcl_inotesMatch9.0.1fixpack_7

hcltechhcl_inotesMatch9.0.1fixpack_8

hcltechhcl_inotesMatch9.0.1fixpack_9

hcltechhcl_inotesMatch10.0

hcltechhcl_inotesMatch10.0.1-

hcltechhcl_inotesMatch10.0.1fixpack_1

hcltechhcl_inotesMatch10.0.1fixpack_2

hcltechhcl_inotesMatch10.0.1fixpack_3

hcltechhcl_inotesMatch10.0.1fixpack_4

hcltechhcl_inotesMatch10.0.1fixpack_5

hcltechhcl_inotesMatch10.0.1fixpack_6

hcltechhcl_inotesMatch10.0.1fixpack_7

hcltechhcl_inotesMatch10.0.1fixpack_8

hcltechhcl_inotesMatch11.0

hcltechhcl_inotesMatch11.0.1-

hcltechhcl_inotesMatch11.0.1fixpack_1

hcltechhcl_inotesMatch11.0.1fixpack_2

hcltechhcl_inotesMatch11.0.1fixpack_3

hcltechhcl_inotesMatch11.0.1fixpack_4

hcltechhcl_inotesMatch11.0.1fixpack_5

hcltechhcl_inotesMatch12.0

hcltechhcl_inotesMatch12.0.1-

hcltechhcl_inotesMatch12.0.1fixpack_1

Node

hcltechdominoMatch9.0

hcltechdominoMatch9.0.1-

hcltechdominoMatch9.0.1fixpack_10

hcltechdominoMatch9.0.1fixpack_3

hcltechdominoMatch9.0.1fixpack_4

hcltechdominoMatch9.0.1fixpack_5

hcltechdominoMatch9.0.1fixpack_6

hcltechdominoMatch9.0.1fixpack_7

hcltechdominoMatch9.0.1fixpack_8

hcltechdominoMatch9.0.1fixpack_9

hcltechdominoMatch10.0

hcltechdominoMatch10.0.1-

hcltechdominoMatch10.0.1fixpack_1

hcltechdominoMatch10.0.1fixpack_2

hcltechdominoMatch10.0.1fixpack_3

hcltechdominoMatch10.0.1fixpack_4

hcltechdominoMatch10.0.1fixpack_5

hcltechdominoMatch10.0.1fixpack_6

hcltechdominoMatch10.0.1fixpack_7

hcltechdominoMatch10.0.1fixpack_8

hcltechdominoMatch11.0

hcltechdominoMatch11.0.1-

hcltechdominoMatch11.0.1fixpack_1

hcltechdominoMatch11.0.1fixpack_2

hcltechdominoMatch11.0.1fixpack_3

hcltechdominoMatch11.0.1fixpack_4

hcltechdominoMatch11.0.1fixpack_5

hcltechdominoMatch12.0

hcltechdominoMatch12.0.1-

hcltechdominoMatch12.0.1fixpack_1

CPENameOperatorVersion
hcltech:hcl_inoteshcltech hcl inoteseq9.0.1
hcltech:hcl_inoteshcltech hcl inoteseq10.0
hcltech:hcl_inoteshcltech hcl inoteseq10.0.1
hcltech:hcl_inoteshcltech hcl inoteseq11.0
hcltech:hcl_inoteshcltech hcl inoteseq11.0.1
hcltech:hcl_inoteshcltech hcl inoteseq12.0
hcltech:hcl_inoteshcltech hcl inoteseq12.0.1

CPE	Name	Operator	Version
hcltech:hcl_inotes	hcltech hcl inotes	eq	9.0.1
hcltech:hcl_inotes	hcltech hcl inotes	eq	10.0
hcltech:hcl_inotes	hcltech hcl inotes	eq	10.0.1
hcltech:hcl_inotes	hcltech hcl inotes	eq	11.0
hcltech:hcl_inotes	hcltech hcl inotes	eq	11.0.1
hcltech:hcl_inotes	hcltech hcl inotes	eq	12.0
hcltech:hcl_inotes	hcltech hcl inotes	eq	12.0.1

CNA Affected

[
  {
    "product": "HCL iNotes",
    "vendor": "HCL Software",
    "versions": [
      {
        "status": "affected",
        "version": "9, 10, 11, 12"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100212

Social References

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Related for CVE-2022-27547

cvelist1 nvd1 prion1