3456 matches found
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from an inadequate cleanup policy that could lead to client-side script injection...
PT-2025-18333 · Hcl · Hcl Leap
Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue concerns missing "no cache" headers in HCL Leap, which allows sensitive data to be cached. This could potentially expose confidential information. Recommendations: At the moment,...
HCL Domino Volt和HCL Domino Leap 安全漏洞
HCL Domino Volt and HCL Domino Leap are both products of HCL India.HCL Domino Volt is a low-code application development solution based on the Domino platform.HCL Domino Leap is a cloud-based collaboration platform that modernizes traditional Domino applications. HCL Domino Volt and HCL Domino Le...
HCL Leap 安全漏洞
HCL Leap is a low-code development platform from HCL India. HCL Leap has a security vulnerability that stems from the lack of a no cache header, which could lead to caching of sensitive data...
PT-2025-18337 · Hcl · Domino Leap +1
Name of the Vulnerable Software and Affected Versions: HCL Domino Volt and Domino Leap affected versions not specified Description: The issue allows client-side script injection in the authoring environment and deployed applications. This can be achieved through multiple vectors in HCL Domino Vol...
PT-2025-18330 · Hcl · Hcl Domino Volt
Name of the Vulnerable Software and Affected Versions: HCL Domino Volt affected versions not specified Description: The issue concerns an unsafe default file type filter policy that allows the upload of .html files and the execution of unsafe JavaScript in deployed applications. This could...
PT-2025-18335 · Hcl · Hcl Leap
Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to insufficient default configuration in HCL Leap, which allows anonymous access to directory information. Recommendations: At the moment, there is no information abou...
HCL Domino Volt 安全漏洞
HCL Domino Volt is a low-code application development solution based on the Domino platform from HCL India. A security vulnerability exists in HCL Domino Volt, which stems from improper cleaning of SVG files and could lead to client-side script injection...
PT-2025-18331 · Hcl · Hcl Domino Volt
Name of the Vulnerable Software and Affected Versions: HCL Domino Volt affected versions not specified Description: The issue concerns an unsafe default file type filter policy that allows the upload of .html files, leading to the execution of unsafe JavaScript in deployed applications. This coul...
PT-2025-18338 · Hcl · Hcl Domino Leap
Name of the Vulnerable Software and Affected Versions: HCL Domino Leap affected versions not specified Description: The issue concerns improper access control of an endpoint in HCL Domino Leap, allowing certain admin users to import applications from the server's filesystem. This could potentiall...
PT-2025-18336 · Hcl · Hcl Leap
Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to an insufficient sanitization policy, which allows client-side script injection in the deployed application. This can be achieved through the HTML widget...
CVE-2024-30152
HCL SX v21 is affected by usage of a weak cryptographic algorithm. An attacker could exploit this weakness to gain access to sensitive information, modify data, or other impacts...
CVE-2023-37516
Missing "no cache" headers in HCL Leap permits user directory information to be cached...
CVE-2022-44759
Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications...
CVE-2022-44760
Unsafe default file type filter policy in HCL Leap allows execution of unsafe JavaScript in deployed applications...
CVE-2024-30127
Missing "no cache" headers in HCL Leap permits sensitive data to be cached...
CVE-2024-30114
Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment...
CVE-2023-45720
Insufficient default configuration in HCL Leap allows anonymous access to directory information...