📦

domino_leap

Vendor: hcltech

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 2 Remote Access
Total CVEs 18 Total Indexed
Avg. EPSS 0.24% Exploit Prob.
Latest CVE CVE-2024-30146 Apr 30

Security Vulnerability Index

Page 1 / 2
4.1 CVSS
CVE-2024-30146

Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.

EPSS: 0.20%
6.5 CVSS
CVE-2024-30145

Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.

EPSS: 0.25%
6.3 CVSS
CVE-2024-30115

Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.

EPSS: 0.24%
5.3 CVSS
CVE-2023-45721

Insufficient default configuration in HCL Leap allows anonymous access to directory information.

EPSS: 0.30%
7.1 CVSS
CVE-2023-37535

Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.

EPSS: 0.23%
3.2 CVSS
CVE-2023-37517

Missing "no cache" headers in HCL Leap permits sensitive data to be cached.

EPSS: 0.22%
4.6 CVSS
CVE-2022-42450

Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.

EPSS: 0.22%
4.6 CVSS
CVE-2022-42449
RCE

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications

EPSS: 0.27%
4.6 CVSS
CVE-2022-27562
RCE

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications.

EPSS: 0.27%