CVE-2024-30146低 2.7Improper access control of endpoint in HCL Domino Leap
allows certain admin users to import applications from the
server's filesystem.
CVE-2024-30145中 6.1Multiple vectors in HCL Domino Volt and Domino Leap allow client-side
script injection in the authoring environment and deployed application…
CVE-2024-30115中 5.4Insufficient sanitization policy in HCL Leap
allows client-side script injection in the deployed application through the
HTML widget.
CVE-2023-37535中 6.1Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters.
CVE-2023-37517高 7.5Missing "no cache" headers in HCL Leap permits sensitive data to be cached.