What’s Vulnerable › Vulnerabilities

CVE-2020-14225

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-21 · updated 2026-06-17

Description

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack.

Affected products

• HCL Software HCL iNotes: 10.0.1, 10.0.1-fixpack1, 10.0.1-fixpack2, 10.0.1-fixpack3, 10.0.1-fixpack4, 11.0.0
• Hcltechsw Hcl Inotes: before 9.0.1; 9.0.1-fixpack_8, 9.0.1-fixpack_9, 9.0.1-fixpack_9_interim_fix_1 — fixed in 9.0.1

How to fix

Upgrade to a fixed version: Hcltechsw Hcl Inotes 9.0.1. Check the vendor advisory for mitigations.

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085915
• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085915

Get alerted when CVE-2020-14225 or the next vulnerability affects your stack