CVE-2020-14225: Hcltech Hcl Inotes

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack.

Affected products

• Hcltech Hcl Inotes: version 10.0.1 only; version 11.0.0 only
• Hcltechsw Hcl Inotes: before 9.0.1 (fixed in 9.0.1); version 9.0.1 only

Published 2020-12-21. Last modified 2026-06-17.