{"affected":[{"affectedData":[{"product":"HCL Notes","vendor":"n/a","versions":[{"status":"affected","version":"v9"},{"status":"affected","version":"v10"},{"status":"affected","version":"v11"}]}],"source":"psirt@hcl.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*","matchCriteriaId":"071126BF-BD0E-4134-B5D2-81DC9A37CD9A","versionEndIncluding":"9.0.1","versionStartIncluding":"9.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0:*:*:*:*:*:*:*","matchCriteriaId":"B3C46D23-F52D-46D7-973B-FEF916ECD181","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:-:*:*:*:*:*:*","matchCriteriaId":"847B0ACB-6B84-4D45-B30F-A930A226E14D","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*","matchCriteriaId":"E36EE406-5355-422B-B1AE-6349DCDBF872","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*","matchCriteriaId":"CFA1279C-D6E4-47D4-9D40-F39EC9C31E12","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*","matchCriteriaId":"4F0771C5-5F44-4563-BEFF-0DCEABE5452A","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp4:*:*:*:*:*:*","matchCriteriaId":"980BB9E6-810B-4288-8667-0291BFFDCB9D","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:10.0.1:fp5:*:*:*:*:*:*","matchCriteriaId":"8BECE3D7-F8C4-4065-8CCC-E9CF70CD6943","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:11.0:*:*:*:*:*:*:*","matchCriteriaId":"06AD0ACF-704C-4BBE-9059-1A1E9008D7A4","vulnerable":true},{"criteria":"cpe:2.3:a:hcltech:notes:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FBE658FD-FD4C-4BB8-9AD7-6AB40AB1BDC2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system."},{"lang":"es","value":"HCL Notes es susceptible a una vulnerabilidad de Desbordamiento de Búfer en DXL debido a una comprobación inapropiada de la entrada de usuario. Una explotación con éxito podría permitir a un atacante bloquear Notes o ejecutar código controlado por el atacante en el sistema cliente"}],"id":"CVE-2020-4102","lastModified":"2026-06-17T03:19:33.387","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.7,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-12-02T01:15:12.903","references":[{"source":"psirt@hcl.com","tags":["Vendor Advisory"],"url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085499"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085499"}],"sourceIdentifier":"psirt@hcl.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-120"}],"source":"nvd@nist.gov","type":"Primary"}]}