← All advisories

Medium severity6.3NVD Advisory· Published Apr 30, 2025· Updated Jun 17, 2026

CVE-2024-30115

CVE-2024-30115

Description

Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.

Affected products

3

HCL Software/Leapllm-create
HCL Software/Domino Leapcpe-rescue
Range: 1.0 - 1.0.5; 1.1 - 1.1.3
HCLTech/Domino Leap
cpe:2.3:a:hcltech:domino_leap:*:*:*:*:*:*:*:*
Range: >=1.1,<1.1.4

Patches

Vulnerability mechanics

References

1

support.hcl-software.com/csmnvdVendor Advisory

News mentions

0

No linked articles in our index yet.