Hcl Domino
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:hcl_domino:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Hcl Domino (4d9d2541-7199-5175-a827-c81a8754416b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-38660 |
vulnerable | 2026-06-08 05:47:16.778410 |
HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability
HIGH (8.3)
HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user.
Published: 2022-11-04T19:57:02.979Z
Updated: 2025-05-02T18:32:49.631Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38654 |
vulnerable | 2026-06-08 05:47:16.745334 |
HCL Domino is susceptible to an information disclosure vulnerability
MEDIUM (5.5)
HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will ignore xACL read restrictions. An authenticated attacker could leverage this vulnerability to access attributes from a user's person record.
Published: 2022-11-04T20:19:37.257Z
Updated: 2025-05-02T18:33:33.783Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4107 |
vulnerable | 2026-06-08 05:25:58.915078 |
HCL Domino is affected by an Insufficient Access Control vulnerability
HIGH (8.8)
HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure.
Published: 2022-05-19T21:25:10.514Z
Updated: 2024-09-16T21:03:04.792Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.