CVE-2020-14230: Input Validation

Published Nov 21, 2020
·
Updated

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the server. Versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1 are affected.

Affected Software

15 affected components
hcltech Domino<9.0.1
hcltech Domino>=10.0.0<10.0.1
hcltech Domino>=11.0.0<11.0.1
hcltech Domino=9.0.1
hcltech Domino=9.0.1-feature_pack_10_interim_fix_3
hcltech Domino=9.0.1-feature_pack_10_interim_fix_4
hcltech Domino=9.0.1-feature_pack_8
hcltech Domino=9.0.1-feature_pack_8_interim_fix_1
hcltech Domino=9.0.1-feature_pack_8_interim_fix_2
hcltech Domino=9.0.1-feature_pack_8_interim_fix_3
hcltech Domino=10.0.1
hcltech Domino=10.0.1-fix_pack_1
hcltech Domino=10.0.1-fix_pack_2
hcltech Domino=10.0.1-fix_pack_3
hcltech Domino=10.0.1-fix_pack_4

Remediation

Patch Available

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085303

Event History

Nov 21, 2020
CVE Published
via MITRE·05:27 PM
Data Sourced
via MITRE·05:27 PM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2020-14230?

The severity of CVE-2020-14230 is classified as high due to its potential to cause Denial of Service.

2

How do I fix CVE-2020-14230?

To fix CVE-2020-14230, updates should be applied to HCL Domino versions 9.0.1 FP10 IF6 or later and 10.0.1 FP5 or later.

3

Who is affected by CVE-2020-14230?

CVE-2020-14230 affects HCL Domino versions prior to 9.0.1 FP10 IF6 and 10.0.1 FP5.

4

What is the impact of CVE-2020-14230?

The impact of CVE-2020-14230 allows a remote unauthenticated attacker to hang the server by sending a specially-crafted email.

5

Can CVE-2020-14230 be exploited remotely?

Yes, CVE-2020-14230 can be exploited remotely by an unauthenticated attacker.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203