CVE-2022-27546

HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials.

Link	Resource
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100216	Vendor Advisory

Configuration 1

cpe:2.3:a:hcltech:hcl_inotes:11.0.1:-:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:-:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_7:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_8:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_9:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0:*:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_1:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_2:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_3:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_4:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_5:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_6:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_7:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:10.0.1:fixpack_8:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:11.0:*:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_1:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_2:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_3:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_4:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:11.0.1:fixpack_5:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:12.0:*:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:12.0.1:-:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:12.0.1:fixpack_1:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_6:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_5:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_4:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_3:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:fixpack_10:*:*:*:*:*:* cpe:2.3:a:hcltech:hcl_inotes:9.0.1:-:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:-:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:-:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:11.0:*:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:11.0.1:-:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0:*:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0:*:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:fixpack_10:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:fixpack_3:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:fixpack_4:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:fixpack_5:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:fixpack_6:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:fixpack_7:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:fixpack_8:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:9.0.1:fixpack_9:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:fixpack_1:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:fixpack_2:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:fixpack_3:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:fixpack_4:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:fixpack_5:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:fixpack_6:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:fixpack_7:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:10.0.1:fixpack_8:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:11.0.1:fixpack_1:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:11.0.1:fixpack_2:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:11.0.1:fixpack_3:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:11.0.1:fixpack_4:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:11.0.1:fixpack_5:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:12.0:*:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:12.0.1:-:*:*:*:*:*:* cpe:2.3:a:hcltech:domino:12.0.1:fixpack_1:*:*:*:*:*:*

---

Published : 2022-08-29 04:15

Updated : 2022-09-01 08:53

---

NVD link : CVE-2022-27546

Mitre link : CVE-2022-27546

No products.

CWE-79