High · 7.1 CVE-2023-37535 EUVD-2023-41422GHSA-2qwx-gxrj-p2mw

HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability

Published Apr 30, 2025 · Updated May 1, 2025 · Assigned by HCL

Description

Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap
allow script injection through query parameters.

Vendor	Product	Affected	Fixed
HCL Software	HCL Domino Leap	1.0 - 1.0.5; 1.1 - 1.1.2	—