PatchTheCVEdomino leap vulnerabilities and fixes
Recent CVEs affecting domino leap, with upgrade or downgrade steps. 9 tracked.
Also searched as: dominoleap.
domino leap has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-04-30. Highest priority: CVE-2023-45721 (score 29/100).
- CVE-2024-30146 MEDIUM 4.1 UPGRADE Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from
- CVE-2024-30145 MEDIUM 6.5 UPGRADE Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring enviro
- CVE-2024-30115 MEDIUM 6.3 UPGRADE Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application t
- CVE-2023-45721 MEDIUM 5.3 UPGRADE Insufficient default configuration in HCL Leap allows anonymous access to directory information.
- CVE-2023-37535 HIGH 7.1 UPGRADE Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query pa
- CVE-2023-37517 LOW 3.2 UPGRADE Missing "no cache" headers in HCL Leap permits sensitive data to be cached.
- CVE-2022-42450 MEDIUM 4.6 MITIGATE Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applicat
- CVE-2022-42449 MEDIUM 4.6 UPGRADE Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe
- CVE-2022-27562 MEDIUM 4.6 UPGRADE Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe
FAQ
How do I fix domino leap vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is domino leap being exploited right now?
None of the tracked domino leap CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which domino leap CVE should I patch first?
CVE-2023-45721 currently ranks highest (29/100): Insufficient default configuration in HCL Leap allows anonymous access to directory information..