Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2970▼ 106 respecto a la semana anterior

Críticas / altas1447▲ 86 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

9 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-30146	Analizada	Baja (2.7)	0.21%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.
CVE-2024-30145	Analizada	Media (6.1)	0.26%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.
CVE-2024-30115	Analizada	Media (5.4)	0.25%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.
CVE-2023-45721	Analizada	Media (5.3)	0.31%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Insufficient default configuration in HCL Leap allows anonymous access to directory information.
CVE-2023-37535	Analizada	Media (6.1)	0.24%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.
CVE-2023-37517	Analizada	Alta (7.5)	0.23%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
CVE-2022-42450	Analizada	Media (5.4)	0.23%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.
CVE-2022-42449	Analizada	Media (5.4)	0.29%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications
CVE-2022-27562	Analizada	Media (5.4)	0.29%	—	Hcltech Domino Leap	30/4/2025	17/6/2026	Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications.