HCL Software HCL Notes vulnerabilities

2 vulnerabilities

Known vulnerabilities in HCL Software HCL Notes, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6CVE-2021-27760hcl softwarehcl notes+1
EPSS score
0.73%
An issue was discovered in the Sametime chat feature in the Notes 11.0 - 11.0.1 FP4 clients. An authenticated Sametime chat user could cause Remote Code Execution on another chat client by sending a specially formatted message through chat containing Javascript code.5.5CVE-2026-9007hcl softwarehcl notes
EPSS score
0.44%
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL Software allows reflected Cross-Site Scripting (XSS).  Successful exploitation allows an attacker to execute arbitrary JavaScript in the context of another user. This issue affects HCL Notes: Release 12.0.2FP5HF8 on Linux 4.18.0-553.52.1.El8_10.X64_64#1.