| CVE-2024-30146 |
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the…
|
4.1
Medium
|
Apr 30, 2025 |
| CVE-2024-30145 |
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment…
|
6.5
Medium
|
Apr 30, 2025 |
| CVE-2024-30115 |
Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the…
|
6.3
Medium
|
Apr 30, 2025 |
| CVE-2023-45721 |
Insufficient default configuration in HCL Leap
allows anonymous access to directory information
|
5.3
Medium
|
Apr 30, 2025 |
| CVE-2023-37535 |
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters
|
7.1
High
|
Apr 30, 2025 |
| CVE-2023-37517 |
Missing "no cache" headers in HCL Leap permits sensitive data to be cached
|
3.2
Low
|
Apr 30, 2025 |