CVE-2022-27558: HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-08-29 · updated 2026-06-17
Weakness: CWE-521

Description

HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could allow users to set weak passwords, leading to easier cracking.

Affected products

HCL Domino: 12.0.1, 12.0.1-fixpack_1
HCL Software HCL iNotes: 12.0.1, 12.0.1-fixpack_1

References

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100217
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100217

Get alerted when CVE-2022-27558 or the next vulnerability affects your stack