Hcltech
Hcltech Domino Leap: vulnerabilidades y CVE
Hcltech Domino Leap tiene 9 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-30146 | Baja (2.7) | 0.21% | — | 30 abr 2025 | Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem. |
| CVE-2024-30145 | Media (6.1) | 0.26% | — | 30 abr 2025 | Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications. |
| CVE-2024-30115 | Media (5.4) | 0.25% | — | 30 abr 2025 | Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. |
| CVE-2023-45721 | Media (5.3) | 0.31% | — | 30 abr 2025 | Insufficient default configuration in HCL Leap allows anonymous access to directory information. |
| CVE-2023-37535 | Media (6.1) | 0.24% | — | 30 abr 2025 | Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters. |
| CVE-2023-37517 | Alta (7.5) | 0.23% | — | 30 abr 2025 | Missing "no cache" headers in HCL Leap permits sensitive data to be cached. |
| CVE-2022-42450 | Media (5.4) | 0.23% | — | 30 abr 2025 | Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications. |
| CVE-2022-42449 | Media (5.4) | 0.29% | — | 30 abr 2025 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications |
| CVE-2022-27562 | Media (5.4) | 0.29% | — | 30 abr 2025 | Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.