HCL iNotes vulnerabilities

2 known vulnerabilities in HCL iNotes from HCL Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  HCL iNotes: Weak Password Requirements

  CVE-2022-27558Aug 29, 2022HCL Software

  HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

• 7.4 High severity

  HCL iNotes: URL Redirection to Untrusted Site

  CVE-2022-27547Aug 29, 2022HCL Software

  HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.