CVE-2022-27547: HCL iNotes is susceptible to a link to non-existent domain vulnerability.

Published Aug 29, 2022

Updated

HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive information such as username, password, credit card number, etc.

Affected Software

59 affected components

hcltech Hcl Inotes=9.0.1

hcltech Hcl Inotes=9.0.1-fixpack_10

hcltech Hcl Inotes=9.0.1-fixpack_3

hcltech Hcl Inotes=9.0.1-fixpack_4

hcltech Hcl Inotes=9.0.1-fixpack_5

hcltech Hcl Inotes=9.0.1-fixpack_6

hcltech Hcl Inotes=9.0.1-fixpack_7

hcltech Hcl Inotes=9.0.1-fixpack_8

hcltech Hcl Inotes=9.0.1-fixpack_9

hcltech Hcl Inotes=10.0

hcltech Hcl Inotes=10.0.1

hcltech Hcl Inotes=10.0.1-fixpack_1

hcltech Hcl Inotes=10.0.1-fixpack_2

hcltech Hcl Inotes=10.0.1-fixpack_3

hcltech Hcl Inotes=10.0.1-fixpack_4

hcltech Hcl Inotes=10.0.1-fixpack_5

hcltech Hcl Inotes=10.0.1-fixpack_6

hcltech Hcl Inotes=10.0.1-fixpack_7

hcltech Hcl Inotes=10.0.1-fixpack_8

hcltech Hcl Inotes=11.0

hcltech Hcl Inotes=11.0.1

hcltech Hcl Inotes=11.0.1-fixpack_1

hcltech Hcl Inotes=11.0.1-fixpack_2

hcltech Hcl Inotes=11.0.1-fixpack_3

hcltech Hcl Inotes=11.0.1-fixpack_4

hcltech Hcl Inotes=11.0.1-fixpack_5

hcltech Hcl Inotes=12.0

hcltech Hcl Inotes=12.0.1

hcltech Hcl Inotes=12.0.1-fixpack_1

hcltech Domino=9.0

hcltech Domino=9.0.1

hcltech Domino=9.0.1-fixpack_10

hcltech Domino=9.0.1-fixpack_3

hcltech Domino=9.0.1-fixpack_4

hcltech Domino=9.0.1-fixpack_5

hcltech Domino=9.0.1-fixpack_6

hcltech Domino=9.0.1-fixpack_7

hcltech Domino=9.0.1-fixpack_8

hcltech Domino=9.0.1-fixpack_9

hcltech Domino=10.0

hcltech Domino=10.0.1

hcltech Domino=10.0.1-fixpack_1

hcltech Domino=10.0.1-fixpack_2

hcltech Domino=10.0.1-fixpack_3

hcltech Domino=10.0.1-fixpack_4

hcltech Domino=10.0.1-fixpack_5

hcltech Domino=10.0.1-fixpack_6

hcltech Domino=10.0.1-fixpack_7

hcltech Domino=10.0.1-fixpack_8

hcltech Domino=11.0

hcltech Domino=11.0.1

hcltech Domino=11.0.1-fixpack_1

hcltech Domino=11.0.1-fixpack_2

hcltech Domino=11.0.1-fixpack_3

hcltech Domino=11.0.1-fixpack_4

hcltech Domino=11.0.1-fixpack_5

hcltech Domino=12.0

hcltech Domino=12.0.1

hcltech Domino=12.0.1-fixpack_1

Event History

Aug 29, 2022

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-27547?

CVE-2022-27547 is rated as a high severity vulnerability due to its potential to expose sensitive user information.

How do I fix CVE-2022-27547?

To fix CVE-2022-27547, ensure you apply the latest security updates from HCL for affected iNotes versions.

Which versions of HCL iNotes are affected by CVE-2022-27547?

CVE-2022-27547 affects HCL iNotes versions 9.0.1 through 12.0.1 and their respective fix packs.

What kind of attack can exploit CVE-2022-27547?

CVE-2022-27547 can be exploited through phishing attacks that lead users to non-existent domains, tricking them into providing sensitive information.

Is there a workaround for CVE-2022-27547?

Currently, there is no specific workaround for CVE-2022-27547, and upgrading to the patched versions is recommended for protection.

CVE-2022-27547: HCL iNotes is susceptible to a link to non-existent domain vulnerability.

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-27547?

How do I fix CVE-2022-27547?

Which versions of HCL iNotes are affected by CVE-2022-27547?

What kind of attack can exploit CVE-2022-27547?

Is there a workaround for CVE-2022-27547?

Company

Resources

Contact