Hcltech Hcl Domino vulnerabilities

2 CVEs affecting Hcltech Hcl Domino, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4129, published 2020-12-01.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-4129, published 2020-12-01. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP…
• CVE-2020-4127, published 2020-11-30. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. HCL Domino is susceptible to a Login CSRF vulnerability. With a valid credential, an attacker could trick a user into accessing a system under another ID or use an intranet user's system to access…