CVE-2020-4085

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-209

Affected software

VendorProductVersions
n/a"HCL Connections""5.5, 6.0, 6.5"

References

Timeline

Published
Apr 22, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-40896.5HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could resuCVE-2020-40925.3"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not CVE-2020-40956.0"BigFix Platform is storing clear text credentials within the system's memory. An attacker who is able to gain administrative privileges canCVE-2020-40976.8In HCL Notes version 9 previous to release 9.0.1 FixPack 10 Interim Fix 8, version 10 previous to release 10.0.1 FixPack 6 and version 11 prCVE-2020-40997.5The application was signed using a key length less than or equal to 1024 bits, making it potentially vulnerable to forged digital signaturesCVE-2020-41004.4"HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which components of the applicCVE-2020-41019.8"HCL Digital Experience is susceptible to Server Side Request Forgery."CVE-2020-41026.7HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enabCVE-2020-41045.4HCL BigFix WebUI is vulnerable to stored cross-site scripting (XSS) within the Apps->Software module. An attacker can use XSS to send a maliCVE-2020-41077.8HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could explCVE-2020-41258.1Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some CVE-2020-41265.9HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the coo
CVE-2020-4085: Medium severity, CVSS 6.5 | Vulnix