CVE-2020-4102: Hcltech Notes

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system.

Affected products

• Hcltech Notes: from 9.0.0, up to and including 9.0.1; version 10.0 only; version 10.0.1 only; version 11.0 only; version 11.0.1 only

Published 2020-12-02. Last modified 2026-06-17.