CVE-2020-4128: Hcltech Domino

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the ID Vault service.

Affected products

• Hcltech Domino: from 9.0.0, up to and including 9.0.1; from 10.0.0, up to and including 10.0.1; from 11.0.0, up to and including 11.0.1; version 10.0.1 only

Published 2020-12-01. Last modified 2026-06-17.