TI-2023-19116 CVE-2023-37517 · GHSA-hvxf-r5rg-wqf7
HCL Domino Volt and Domino Leap are affected by missing "no cache" headers
Priority LOW 32
Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
HCL Software
Records662All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical66CVSS 9.0–10.0
CVSS high157CVSS 7.0–8.9
Exploited now
HCL Software records in CISA KEVNo HCL Software vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Domino Leap · all components
TI-2023-19134 CVE-2023-37535 · GHSA-2qwx-gxrj-p2mw
HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability
Priority LOW 31
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.
TI-2023-24503 CVE-2023-45721 · GHSA-ghx8-237w-32r2
HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability
Priority LOW 30
Insufficient default configuration in HCL Leap allows anonymous access to directory information.
TI-2024-19897 CVE-2024-30145 · GHSA-qv82-fg9p-2q3r
HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability
Priority LOW 28
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.
TI-2024-19876 CVE-2024-30115 · GHSA-92mm-5wc3-vwff
HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability
Priority LOW 28
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.
TI-2022-20650 CVE-2022-42450 · GHSA-q8f5-fgrg-h6j8
HCL Domino Volt is affected by Cross-site scripting (XSS)
Priority LOW 24
Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.
TI-2022-20649 CVE-2022-42449 · GHSA-wfj7-6gw7-5442
HCL Domino Volt is affected by an unrestricted upload of a dangerous file type
Priority LOW 24
Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications
TI-2022-10557 CVE-2022-27562 · GHSA-2ff4-cc78-4pg6
HCL Domino Volt is affected by an unrestricted upload of a dangerous file type
Priority LOW 24
Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications.
TI-2024-19898 CVE-2024-30146 · GHSA-4w8f-w8xh-rq2w
HCL Domino Leap is affected by improper access control
Priority LOW 19
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.