CVE-2020-4127: Hcltech Hcl Domino

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access internal systems from the internet. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

Affected products

• Hcltech Hcl Domino: before 9.0.1 (fixed in 9.0.1); from 10.0.0, before 10.0.1 (fixed in 10.0.1); from 11.0.0, before 11.0.1 (fixed in 11.0.1); version 9.0.1 only; version 10.0.1 only

Published 2020-11-30. Last modified 2026-06-17.