Skip to content
Sign in
8.3 High

CVE-2022-38660 HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability

Description

HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user.  

Affected products and versions

Product Affected versions Fixed in
HCL Domino 9 No fix stated

Other CVEs of HCL Domino

The 3 CVEs of HCL Domino →
CVE-2022-38654 HCL Domino is susceptible to an information disclosure vulnerability 5.5 Medium CVE-2020-4107 HCL Domino is affected by an Insufficient Access Control vulnerability 8.8 High
Track this CVE