Hcl Software Hcl Domino Leap
6 CVEs affecting Hcl Software Hcl Domino Leap. Latest disclosed: 2025-04-30. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-37535 | High | 7.1 | 2025-04-30 | Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters. |
CVE-2024-30145 | Medium | 6.5 | 2025-04-30 | Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications. |
CVE-2024-30115 | Medium | 6.3 | 2025-04-30 | Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. |
CVE-2023-45721 | Medium | 5.3 | 2025-04-30 | Insufficient default configuration in HCL Leap allows anonymous access to directory information. |
CVE-2024-30146 | Medium | 4.1 | 2025-04-30 | Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem. |
CVE-2023-37517 | Low | 3.2 | 2025-04-30 | Missing "no cache" headers in HCL Leap permits sensitive data to be cached. |