Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:hcl_nomad:*:*:*:*:*:-:*:*

part: a version: * update: *

VendorHcltech (be2dce80-cb79-5854-9fe6-9b4a1139ec3e)
ProductHcl Nomad (6a1c4f66-f390-5052-bf4b-8a73bb64b631)
Edition*
Language*
Software edition*
Target software-
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-30129 vulnerable 2026-06-08 06:35:29.071116 HCL Nomad server on Domino is affected by a host header injection vulnerability
MEDIUM (5.3)
The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.
Published: 2024-12-06T15:57:41.869Z
Updated: 2024-12-06T17:01:53.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23586 vulnerable 2026-06-08 06:29:39.969340 An insufficient session timeout vulnerability affects HCL Nomad server on Domino
MEDIUM (5.3)
HCL Nomad is susceptible to an insufficient session expiration vulnerability.   Under certain circumstances, an unauthenticated attacker could obtain old session information.
Published: 2024-09-27T21:20:29.383Z
Updated: 2024-10-04T13:56:37.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23342 vulnerable 2026-06-08 05:54:28.110972 HCL Nomad for web is affected by cryptographic validation of local data access that can be circumvented
MEDIUM (6.6)
If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented. 
Published: 2023-08-10T18:46:23.638Z
Updated: 2024-10-09T19:32:09.791Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.