4.1
Medium
CVE-2024-30146 Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the…
Description
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Domino Leap | Versions not published |
Other CVEs of HCL Domino Leap
The 6 CVEs of HCL Domino Leap →
CVE-2024-30145
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment…
6.5
Medium
CVE-2024-30115
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the…
6.3
Medium
CVE-2023-45721
Insufficient default configuration in HCL Leap
allows anonymous access to directory information
5.3
Medium
CVE-2023-37535
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters
7.1
High