CVE-2020-4097: Hcltech Notes

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 previous to 11.0.1 FixPack 1, a vulnerability in the input parameter handling of the Notes Client could potentially be exploited by an attacker resulting in a buffer overflow. This could enable an attacker to crash HCL Notes or execute attacker-controlled code on the client.

Affected products

• Hcltech Notes: from 9.0, up to and including 9.0.1; from 11.0, up to and including 11.0.1; version 9.0.1 only; version 10.0.0 only; version 10.0.1 only

Published 2020-11-05. Last modified 2026-06-17.