Domino (Hcltech) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 52 known versions, newest CVE from 2024-07-08. Vendor: Hcltech.

CVEs of Domino

CVE-2024-23562 - CVSS 7.5 (high), 2024-07-08: A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information. A remote unauthenticated attacker could exploit this…
CVE-2023-37539 - CVSS 8.4 (high), 2024-06-06: The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog…
CVE-2023-37495 - CVSS 5.9 (medium), 2024-02-29: Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action on the People & Groups tab in the Domino®…
CVE-2023-28010 - CVSS 5.3 (medium), 2023-09-08: In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attacks.
CVE-2022-44754 - CVSS 9.8 (critical), 2022-12-19: HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated…
CVE-2022-44750 - CVSS 9.8 (critical), 2022-12-19: HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated…
CVE-2022-44752 - CVSS 9.8 (critical), 2022-12-19: HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated…
CVE-2022-38654 - CVSS 5.5 (medium), 2022-11-04: HCL Domino is susceptible to an information disclosure vulnerability. In some scenarios, local calls made on the server to search the Domino directory will…
CVE-2022-38660 - CVSS 8.8 (high), 2022-11-04: HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to…
CVE-2022-27558 - CVSS 7.5 (high), 2022-08-29: HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability. Custom password policies are not enforced on certain iNotes forms which could…
CVE-2022-27547 - CVSS 7.4 (high), 2022-08-29: HCL iNotes is susceptible to a link to non-existent domain vulnerability. An attacker could use this vulnerability to trick a user into supplying sensitive…
CVE-2022-27546 - CVSS 8.3 (high), 2022-08-29: HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input supplied with a form…
CVE-2020-4107 - CVSS 8.8 (high), 2022-05-19: HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this…
CVE-2020-14273 - CVSS 7.5 (high), 2020-12-28: HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker…
CVE-2020-14270 - CVSS 5.3 (medium), 2020-12-22: HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated…
CVE-2020-4080 - CVSS 6.1 (medium), 2020-12-18: HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated…
CVE-2020-14244 - CVSS 9.8 (critical), 2020-12-14: A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting…
CVE-2020-14260 - CVSS 9.8 (critical), 2020-12-02: HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to…
CVE-2020-4128 - CVSS 5.3 (medium), 2020-12-01: HCL Domino is susceptible to a lockout policy bypass vulnerability in the ID Vault service. An unauthenticated attacker could use this vulnerability to mount…
CVE-2020-14234 - CVSS 7.5 (high), 2020-11-21: HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability…
CVE-2020-14230 - CVSS 7.5 (high), 2020-11-21: HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could…
CVE-2017-1712 - CVSS 5.9 (medium), 2020-07-01: "A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka…