Skip to content
OpenAdvisories
High · 8.3 CVE-2022-38660 EUVD-2022-41233GHSA-pm8g-g665-8r7q

HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability

Published Nov 4, 2022 · Updated May 2, 2025 · Assigned by HCL

Description

HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user.  

Affected products

VendorProductAffectedFixed
HCL Software HCL Domino v9 —

References