Skip to content
OpenAdvisories
Medium · 4.6 CVE-2021-27760 EUVD-2021-14501GHSA-xcf3-q63w-pqpj

HCL Notes 11.0 - 11.0.1 FP4 Sametime Embedded chat clients are vulnerable to group chats loading script on restart

Published May 6, 2022 · Updated Sep 17, 2024 · Assigned by HCL

Description

An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code.

Affected products

VendorProductAffectedFixed
HCL Software HCL Notes 11.0 - 11.0.1 FP4 —

References