CVE-2020-4089
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2020
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
HCL Notes
- Vendor
- HCL
- Product
- HCL Notes
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| All versions of HCL Notes v9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| All versions of HCL Notes v10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| All versions of HCL Notes v11 | affected | Unavailable | Unavailable | Unavailable | None listed |