CVE-2023-37535 Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters

Description

Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
HCL Domino Leap	Versions non publiées

Autres CVE de HCL Domino Leap

Les 6 CVE de HCL Domino Leap →

CVE-2024-30146 Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the… 4.1 Moyenne CVE-2024-30145 Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment… 6.5 Moyenne CVE-2024-30115 Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the… 6.3 Moyenne CVE-2023-45721 Insufficient default configuration in HCL Leap allows anonymous access to directory information 5.3 Moyenne