Description
HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into entering sensitive information such as credentials, e.g. as part of a phishing attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | HCL iNotes | versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1 | — |