CVE-2020-14230: Hcltech Domino

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the server. Versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1 are affected.

Affected products

• Hcltech Domino: before 9.0.1 (fixed in 9.0.1); from 10.0.0, before 10.0.1 (fixed in 10.0.1); from 11.0.0, before 11.0.1 (fixed in 11.0.1); version 9.0.1 only; version 10.0.1 only

Published 2020-11-21. Last modified 2026-06-17.