CVE-2023-45721

Insufficient default configuration in HCL Leap allows anonymous access to directory information...

CVE-2024-30115

Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget...

CVE-2024-30146

Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem...

CVE-2023-37517

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

CVE-2023-37517

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

CVE-2024-30146 HCL Domino Leap is affected by improper access control

Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem...

CVE-2024-30146 HCL Domino Leap is affected by improper access control

Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem...

CVE-2024-30146

The CVE-2024-30146 entry concerns HCL Domino Leap. Affected component: the endpoint handling import of applications. Root cause: improper access control allowing certain admin users to import applications from the server’s filesystem. Impact as described: potential unauthorized filesystem access ...

CVE-2024-30145 HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability

Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications...

CVE-2024-30145 HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability

Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications...

CVE-2024-30115

CVE-2024-30115 affects HCL Leap (and related Domino Leap) with an insufficient sanitization policy that allows client-side script injection through the HTML widget. Concrete details across sources indicate an XSS risk, but the available documents do not specify affected versions or a confirmed ex...

CVE-2023-45721

CVE-2023-45721 concerns HCL Leap (and related references note HCL Domino Leap) with insufficient default configuration that permits anonymous access to directory information. Connected sources corroborate the issue in HCL Leap, describe it as a disclosure of private information due to misconfigur...

CVE-2023-37535 HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability

Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters...

CVE-2023-37535 HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability

Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters...

CVE-2023-37517

The CVE-2023-37517 entry concerns HCL Leap (and Domino Leap per CVE context) with a missing no-cache header, allowing sensitive data to be cached. Root cause stated is absence of cache-control/no-cache headers, leading to potential exposure of confidential data. Connected sources confirm affected...

CVE-2023-37517 HCL Domino Volt and Domino Leap are affected by missing "no cache" headers

Missing "no cache" headers in HCL Leap permits sensitive data to be cached...

Security update for the Linux Kernel (Live Patch 52 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059188 fixes one issue. The following security issue was fixed: CVE-2024-56650: netfilter: xtables: fix LED ID check in ledtgcheck bsc1235431. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

Security update for the Linux Kernel (Live Patch 50 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059182 fixes several issues. The following security issues were fixed: CVE-2024-50205: ALSA: firewire-lib: Avoid division by zero in applyconstrainttosize bsc1233294. CVE-2024-56650: netfilter: xtables: fix LED ID check in ledtgcheck bsc1235431. Patch...

PT-2025-18335

Name of the Vulnerable Software and Affected Versions HCL Leap affected versions not specified Description Insufficient default configuration in HCL Leap allows anonymous access to directory information. The issue concerns a lack of proper default settings, enabling unauthorized access to directo...

PT-2025-18338

Name of the Vulnerable Software and Affected Versions HCL Domino Leap affected versions not specified Description An improper access control issue exists in HCL Domino Leap. This allows specific administrator users to import applications from the server's filesystem via an endpoint. The issue...