Hcl Domino Leap
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:hcl_domino_leap:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Hcl Domino Leap (909fd87e-a988-5e7d-b7ba-3959150e0874) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-30146 |
vulnerable | 2026-06-08 06:35:29.083729 |
HCL Domino Leap is affected by improper access control
MEDIUM (4.1)
Improper access control of endpoint in HCL Domino Leap
allows certain admin users to import applications from the
server's filesystem.
Published: 2025-04-30T21:16:31.949Z
Updated: 2025-05-01T15:34:11.144Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30145 |
vulnerable | 2026-06-08 06:35:29.083436 |
HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability
MEDIUM (6.5)
Multiple vectors in HCL Domino Volt and Domino Leap allow client-side
script injection in the authoring environment and deployed applications.
Published: 2025-04-30T21:15:23.377Z
Updated: 2025-05-01T15:34:19.195Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30115 |
vulnerable | 2026-06-08 06:35:29.048404 |
HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability
MEDIUM (6.3)
Insufficient sanitization policy in HCL Leap
allows client-side script injection in the deployed application through the
HTML widget.
Published: 2025-04-30T21:14:20.204Z
Updated: 2025-05-01T15:34:29.039Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45721 |
vulnerable | 2026-06-08 06:12:43.157848 |
HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability
MEDIUM (5.3)
Insufficient default configuration in HCL Leap
allows anonymous access to directory information.
Published: 2025-04-30T21:13:30.911Z
Updated: 2025-05-01T15:34:36.660Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37535 |
vulnerable | 2026-06-08 06:08:15.572648 |
HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability
HIGH (7.1)
Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters.
Published: 2025-04-30T21:12:38.618Z
Updated: 2025-05-01T15:34:42.961Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37517 |
vulnerable | 2026-06-08 06:08:15.544079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.