Sign in

4.6 Medium

CVE-2022-27562 Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript…

Description

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications.

Affected products and versions

Product	Affected versions	Fixed in
HCL Domino Volt	Versions not published

The 3 CVEs of HCL Domino Volt →

CVE-2022-42450 Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications 4.6 Medium CVE-2022-42449 Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript… 4.6 Medium

Do you use HCL Domino Volt?

Track this CVE Watch HCL Domino Volt Check my SBOMs

www.cveye.io/en/cve/CVE-2022-27562

Timeline

Published April 30, 2025
Last modified May 1, 2025

References

support.hcl-software.com support.hcl-software.com

Track this CVE