Skip to content
Sign in
8.4 High

CVE-2023-37539 The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability

Description

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicking it.

Affected products and versions

Product Affected versions Fixed in
Domino Server Versions not published
domino 14.0 No fix stated

Other CVEs of Domino Server

The 2 CVEs of Domino Server →
CVE-2024-23562 A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information 5.3 Medium
Track this CVE