CVE-2023-28015

MEDIUM 5.3CVE-2023-28015 · Published 23/05/2023 · updated 17/06/2026

In short

CVE-2023-28015 is a MEDIUM (CVSS 5.3) vulnerability affecting domino appdev pack (hcl).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.1% of all vulnerabilities.
Fix: update to 1.0.16 or later.

Package	Affected versions	Patched versions
domino appdev pack hcl	`< 1.0.16`	`1.0.16`

Description

The HCL Domino AppDev Pack IAM service is susceptible to a User Account Enumeration vulnerability. During a failed login attempt a difference in messages could allow an attacker to determine if the user is valid or not. The attacker could use this information to focus a brute force attack on valid users.

References

support.hcltechsw.com/csm · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free