Hcltech Domino Leap vulnerabilities
9 vulnerabilities
Known vulnerabilities in Hcltech Domino Leap, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-42449hcl softwarehcl domino volt+1
EPSS score0.29%
Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applicationsCVE-2022-42450hcl softwarehcl domino volt+1EPSS score0.23%
Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.CVE-2022-27562hcl softwarehcl domino volt+1EPSS score0.29%
Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications.CVE-2024-30145hcl softwarehcl domino leap+1EPSS score0.26%
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side
script injection in the authoring environment and deployed applications.CVE-2024-30115hcl softwarehcl domino leap+1EPSS score0.25%
Insufficient sanitization policy in HCL Leap
allows client-side script injection in the deployed application through the
HTML widget.CVE-2024-30146hcl softwarehcl domino leap+1EPSS score0.21%
Improper access control of endpoint in HCL Domino Leap
allows certain admin users to import applications from the
server's filesystem.CVE-2023-37535hcl softwarehcl domino leap+1EPSS score0.24%
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters.CVE-2023-37517hcl softwarehcl domino leap+1EPSS score0.23%
Missing "no cache" headers in HCL Leap permits sensitive data to be cached.CVE-2023-45721hcl softwarehcl domino leap+1EPSS score0.31%
Insufficient default configuration in HCL Leap
allows anonymous access to directory information.