CVSS: 7.8EPSS: 0%CPEs: 59EXPL: 0CVE-2022-27547 – HCL iNotes is susceptible to a link to non-existent domain vulnerability.
https://notcve.org/view.php?id=CVE-2022-27547
29 Aug 2022 — HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc. HCL iNotes es susceptible de una vulnerabilidad de enlace a un dominio no existente. Un atacante podría usar esta vulnerabilidad para engañar a un usuario para que proporcione información confidencial como el nombre de usuario, la contraseña, el número de tarjeta de crédito, etc • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100212 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 8.3EPSS: 0%CPEs: 59EXPL: 0CVE-2022-27546 – HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability
https://notcve.org/view.php?id=CVE-2022-27546
29 Aug 2022 — HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form POST request. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's web browser within the security context of the hosting web site and/or steal the victim's cookie-based authentication credentials. HCL iNotes es susceptible de sufrir una vulnerabilidad de tipo Cross-site Scripting (XSS) Reflejad... • https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100216 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •