medium6.5
CVE-2020-14225
HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content.
Impact
HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Hcl Inotes | Versions 10.0.1, 11.0.0 |
| Hcltechsw | Hcl Inotes | before 9.0.1 Version 9.0.1 |