CVE-2020-14258: Hcltech Notes

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected.

Affected products

• Hcltech Notes: version 9.0 only; version 10.0 only; version 11.0 only

Published 2020-11-21. Last modified 2026-06-17.