HCL Domino Security: Can You Read This CVSS Vector?

Vladislav Tatarincev  8 April 2026 09:01:20

When you see something like CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N   in an HCL Domino security bulletin, don’t treat it like random cryptic text.
It’s actually a compact way to answer two very important questions:
1. How can the vulnerability be exploited?
2. What damage can it cause?

This specific vector means: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
AV:N — attackable over the network
AC:L — low complexity, not hard to exploit
AT:P — some additional conditions must exist
PR:N — no privileges required
UI:N — no user action required
VC:N / VI:N — no impact on confidentiality or integrity
VA:H — high impact on availability
SC:N / SI:N / SA:N — no impact on connected downstream systems

In plain English:
This looks like a vulnerability that can be triggered remotely, without login, and without user interaction. That already deserves attention.The main risk here is not data theft or data manipulation — the real danger is service disruption.
Quick CVSS v4 cheat sheet
AV — Attack Vector
N = Network
A = Adjacent
L = Local
P = Physical
AC — Attack Complexity
L = Low
H = High
AT — Attack Requirements
N = None
P = Present
PR — Privileges Required
N = None
L = Low
H = High
UI — User Interaction
N = None
P = Passive
A = Active

VC / VI / VA
Impact on the vulnerable system:
Confidentiality
Integrity
Availability
Values:
N = None
L = Low
H = High
SC / SI / SA
Impact on subsequent systems:
Confidentiality
Integrity
Availability

Lesson learned for Domino people: If you see AV:N + PR:N + UI:N, pay attention immediately.

For any Sametime,Domino, Connections environment, that usually means a potentially dangerous remote scenario — especially if the server is exposed or business-critical, UI:N says that user even not involved, should not click some bad link.
Security bulletins are not just for security teams. Admins should be able to read the vector and instantly understand the risk.

Get a free account on HCL Support, subscribe to products you use: https://support.hcl-software.com/community?id=community_forum&sys_id=038a2b921b7bb34c77761fc58d4bcb0d get alerts from HCL or from our Monitoring solution. See my previous post about CYMON.

• Comments [0]