CVE-2020-4129: Hcltech Hcl Domino

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later.

Affected products

• Hcltech Hcl Domino: before 9.0.1 (fixed in 9.0.1); from 10.0.0, before 10.0.1 (fixed in 10.0.1); from 11.0.0, before 11.0.1 (fixed in 11.0.1); version 9.0.1 only; version 10.0.1 only

Published 2020-12-01. Last modified 2026-06-17.