« Volver al listado

CVE-2020-14234

Estado: ModificadaAlta (7.5)—

HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability to crash the server. Versions previous to release 9.0.1 FP10 IF6 and release 10.0.1 are affected.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Hcltech — Domino

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-14234",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@hcl.com",
      "affectedData": [
        {
          "vendor": "HCL",
          "product": "HCL Domino",
          "versions": [
            {
              "status": "affected",
              "version": "versions previous to release 9.0.1 FP10 IF6"
            },
            {
              "status": "affected",
              "version": "release 10.0.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-11-21T18:15:11.680",
  "references": [
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085302",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@hcl.com"
    },
    {
      "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085302",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability to crash the server. Versions previous to release 9.0.1 FP10 IF6 and release 10.0.1 are affected."
    },
    {
      "lang": "es",
      "value": "HCL Domino es susceptible a una vulnerabilidad de Denegación de Servicio debido a una comprobación inapropiada de la entrada suministrada por el usuario, dándole potencialmente al atacante la capacidad de bloquear el servidor. Versiones anteriores a versión 9.0.1 FP10 IF6 y versión 10.0.1 están afectadas"
    }
  ],
  "lastModified": "2026-06-17T02:54:26.683",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA96995E-99EC-4260-A329-B4137AFBEB6B",
              "versionEndExcluding": "9.0.1"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4CB117EF-6AE5-4323-9ACF-01DE2C92182D",
              "versionEndExcluding": "10.0.1",
              "versionStartIncluding": "10.0.0"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:9.0.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E0BF886-B732-4210-82AA-4D2B3F77132B"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_10_interim_fix_3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2D00AC8D-4E35-49F4-B0EE-C03E1EE67B8E"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_10_interim_fix_4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FBD1792-01BA-402A-859E-531F7614C9A2"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_10_interim_fix_5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB652BE0-5767-4D42-A618-1315243A5C52"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3D799A2-AC87-43E8-A6A2-E76E1535A7C4"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_8_interim_fix_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C9A93C4-70E8-472D-A038-14F72780E02F"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_8_interim_fix_2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "442C02A0-0232-488A-8A66-62386FFBC807"
            },
            {
              "criteria": "cpe:2.3:a:hcltech:domino:9.0.1:feature_pack_8_interim_fix_3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A349B3BD-CB3D-4290-BE9E-8FFA68C3512B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@hcl.com"
}