Security Advisory
CVE-2025-0248
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote, unauthenticated attacker can specially craft a URL to execute script in a victims Web browser within the security context of the hosting Web site and/or steal the victims cookie-based authentication credentials.