| CVE-2024-30146 |
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the…
|
4.1
Moyenne
|
30 avr. 2025 |
| CVE-2024-30145 |
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment…
|
6.5
Moyenne
|
30 avr. 2025 |
| CVE-2024-30115 |
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the…
|
6.3
Moyenne
|
30 avr. 2025 |
| CVE-2023-45721 |
Insufficient default configuration in HCL Leap
allows anonymous access to directory information
|
5.3
Moyenne
|
30 avr. 2025 |
| CVE-2023-37535 |
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters
|
7.1
Élevée
|
30 avr. 2025 |
| CVE-2023-37517 |
Missing "no cache" headers in HCL Leap permits sensitive data to be cached
|
3.2
Faible
|
30 avr. 2025 |