6.5
Medium
CVE-2024-30145 Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment…
Description
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Domino Leap | Versions not published |
Other CVEs of HCL Domino Leap
The 6 CVEs of HCL Domino Leap →
CVE-2024-30146
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the…
4.1
Medium
CVE-2024-30115
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the…
6.3
Medium
CVE-2023-45721
Insufficient default configuration in HCL Leap
allows anonymous access to directory information
5.3
Medium
CVE-2023-37535
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters
7.1
High