Hcltech HCL Domino 11.0

HCL Domino is affected by an Insufficient Access Control vulnerability

HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability

HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability

HCL Domino is susceptible to an information disclosure vulnerability

HCL iNotes is susceptible to a link to non-existent domain vulnerability.

HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulnerability using specially-crafted markup to execute script in a victim's web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.