High severity · published Dec 28, 2020
CVE-2020-14273
HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API
7.5
CVSS
1.3%
EPSS
No
On KEV
Description
HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker could could exploit this vulnerability to crash the Domino server.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
Domino · Hcltech
10.0.1; 10.0.1; 10.0.1; 10.0.1; 10.0.1; 10.0.1; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-14273
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-14273
Exploit
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085947
More from Domino
9.8
CVE-2020-14244
A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer…
9.8
CVE-2020-14260
HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input
8.8
CVE-2022-38660
HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability
7.8
CVE-2022-44754
HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView
7.8
CVE-2022-44752
HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView