Skip to content
OpenAdvisories
Low · 3.7 CVE-2025-62328 EUVD-2025-208603GHSA-7r6h-mj29-p9xg

HCL Nomad server on Domino is affected by a missing default frame-ancestors directive

Published Mar 11, 2026 · Updated Mar 12, 2026 · Assigned by HCL

Description

HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

VendorProductAffectedFixed
HCLSoftware Nomad server on Domino <1.0.19 —

References