Vulnerabilities CVE-2026-9007

CVE-2026-9007

Medium

Open

TLP:CLEAR

Reflected XSS in HCL Notes

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in HCL Notes from HCL Software allows reflected Cross-Site Scripting (XSS). Successful exploitation allows an attacker to execute arbitrary JavaScript in the context of another user. This issue affects HCL Notes: Release 12.0.2FP5HF8 on Linux 4.18.0-553.52.1.El8_10.X64_64#1.

Details

CVSS Score: 5.5
EPSS Score ⓘ: 0.26%

17.4th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Confidence: 90%
Published: Jul 15, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.