Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:hcl_domino_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductHcl Domino Server (77a90efb-a416-5a76-8cc3-8ef9e07e6deb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37495 vulnerable 2026-06-08 06:08:15.522529 HCL Domino is susceptible to a weak cryptography vulnerability
MEDIUM (5.9)
Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action on the People & Groups tab in the Domino® Administrator are secured using a cryptographically weak hash algorithm. This could enable attackers with access to the hashed value to determine a user's password, e.g. using a brute force attack. This issue does not impact Person documents created through user registration https://help.hcltechsw.com/domino/10.0.1/admin/conf_userregistration_c.html .
Published: 2024-02-20T18:22:21.038Z
Updated: 2024-11-05T17:56:44.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28010 vulnerable 2026-06-08 05:57:42.836434 HCL Domino is susceptible to a sensitive information disclosure vulnerability
MEDIUM (4)
In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attacks.
Published: 2023-09-08T17:36:51.368Z
Updated: 2024-09-26T15:42:58.815Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.