VYPR

Domino Volt

by HCL Software

CVEs (5)

  • CVE-2024-30145Apr 30, 2025
    risk 0.00cvss epss 0.00

    Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.

  • CVE-2023-37535Apr 30, 2025
    risk 0.00cvss epss 0.00

    Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.

  • CVE-2022-42450Apr 30, 2025
    risk 0.00cvss epss 0.00

    Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.

  • CVE-2022-42449Apr 30, 2025
    risk 0.00cvss epss 0.00

    Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications

  • CVE-2022-27562Apr 30, 2025
    risk 0.00cvss epss 0.00

    Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications.