Low severity3.7NVD Advisory· Published Mar 11, 2026· Updated Jun 17, 2026

CVE-2025-62328

Description

HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

HCL Software/Nomadllm-create
HCL Software/Nomad servercpe-rescue
Range: <1.0.19

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvd

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000