6.5
Moyenne
CVE-2024-30145 Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment…
Description
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL Domino Leap | Versions non publiées |
Autres CVE de HCL Domino Leap
Les 6 CVE de HCL Domino Leap →
CVE-2024-30146
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the…
4.1
Moyenne
CVE-2024-30115
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the…
6.3
Moyenne
CVE-2023-45721
Insufficient default configuration in HCL Leap
allows anonymous access to directory information
5.3
Moyenne
CVE-2023-37535
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters
7.1
Élevée