HIGH🇵🇱 Wersja polska

CVE-2023-37539

CVSS 8.4v3.1pub. 2024-06-06upd. 2024-11-21

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicking it.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

  • Hcltech Domino

    APP
    Hcltech
    11.012.014.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2022-44750CRITICAL9.8PL ✓same product

HCL Domino: stack-based buffer overflow w lasr.dll (KeyView) — RCE

CVE-2022-44752CRITICAL9.8PL ✓same product

HCL Domino: stack-based buffer overflow w bibliotece wp6sr.dll (KeyView)

CVE-2022-44754CRITICAL9.8PL ✓same product

HCL Domino: stack-based buffer overflow w lasr.dll (KeyView) — RCE bez uwierzytelnienia

CVE-2020-14244CRITICAL9.8PL ✓same product

Stack buffer overflow w obsłudze MIME w HCL Domino — zdalne wykonanie kodu

CVE-2020-14260CRITICAL9.8PL ✓same product

Buffer Overflow w HCL Domino (DXL) umożliwiający RCE lub crash serwera