CRITICAL🇵🇱 Wersja polska

CVE-2022-44754

CVSS 9.8v3.1pub. 2022-12-19upd. 2025-04-17

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44750.  This vulnerability applies to software previously licensed by IBM.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Hcltech Domino

    APP
    Hcltech
    9.09.0.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEAuth BypassMemory
CWE
References

Related vulnerabilities

CVE-2022-44750CRITICAL9.8PL ✓same product

HCL Domino: stack-based buffer overflow w lasr.dll (KeyView) — RCE

CVE-2022-44752CRITICAL9.8PL ✓same product

HCL Domino: stack-based buffer overflow w bibliotece wp6sr.dll (KeyView)

CVE-2020-14244CRITICAL9.8PL ✓same product

Stack buffer overflow w obsłudze MIME w HCL Domino — zdalne wykonanie kodu

CVE-2020-14260CRITICAL9.8PL ✓same product

Buffer Overflow w HCL Domino (DXL) umożliwiający RCE lub crash serwera

CVE-2023-37539HIGH8.4same product

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker w...