GCVE - cpe:2.3:a:hcltech:domino_leap:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:domino_leap:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Hcltech (`be2dce80-cb79-5854-9fe6-9b4a1139ec3e`)
Product	Domino Leap (`c00b1ccc-b885-5d1f-ac36-9e9f04b31545`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-30146`	vulnerable	2026-06-08 06:35:29.083864	HCL Domino Leap is affected by improper access control MEDIUM (4.1) Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem. Published: 2025-04-30T21:16:31.949Z Updated: 2025-05-01T15:34:11.144Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-30145`	vulnerable	2026-06-08 06:35:29.083478	HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability MEDIUM (6.5) Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications. Published: 2025-04-30T21:15:23.377Z Updated: 2025-05-01T15:34:19.195Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-30115`	vulnerable	2026-06-08 06:35:29.053641	HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability MEDIUM (6.3) Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget. Published: 2025-04-30T21:14:20.204Z Updated: 2025-05-01T15:34:29.039Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-45721`	vulnerable	2026-06-08 06:12:43.158526	HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability MEDIUM (5.3) Insufficient default configuration in HCL Leap allows anonymous access to directory information. Published: 2025-04-30T21:13:30.911Z Updated: 2025-05-01T15:34:36.660Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37535`	vulnerable	2026-06-08 06:08:15.572685	HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability HIGH (7.1) Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters. Published: 2025-04-30T21:12:38.618Z Updated: 2025-05-01T15:34:42.961Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37517`	vulnerable	2026-06-08 06:08:15.544763	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-42449`	vulnerable	2026-06-08 05:49:29.977253	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-27562`	vulnerable	2026-06-08 05:41:56.718783	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.