PatchTheCVE: domino leaphttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-30146: Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from https://patchthecve.com/cve/CVE-2024-30146.htmlhttps://patchthecve.com/cve/CVE-2024-30146.htmlWed, 17 Jun 2026 07:26:21 +0000MEDIUM 4.1: Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.CVE-2024-30145: Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring envirohttps://patchthecve.com/cve/CVE-2024-30145.htmlhttps://patchthecve.com/cve/CVE-2024-30145.htmlWed, 17 Jun 2026 07:26:21 +0000MEDIUM 6.5: Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.CVE-2024-30115: Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application thttps://patchthecve.com/cve/CVE-2024-30115.htmlhttps://patchthecve.com/cve/CVE-2024-30115.htmlWed, 17 Jun 2026 07:26:19 +0000MEDIUM 6.3: Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.CVE-2023-45721: Insufficient default configuration in HCL Leap allows anonymous access to directory information.https://patchthecve.com/cve/CVE-2023-45721.htmlhttps://patchthecve.com/cve/CVE-2023-45721.htmlWed, 17 Jun 2026 06:29:24 +0000MEDIUM 5.3: Insufficient default configuration in HCL Leap allows anonymous access to directory information.CVE-2023-37535: Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query pahttps://patchthecve.com/cve/CVE-2023-37535.htmlhttps://patchthecve.com/cve/CVE-2023-37535.htmlWed, 17 Jun 2026 06:08:23 +0000HIGH 7.1: Insufficient URI protocol whitelist in HCL Domino Volt and Domino Leap allow script injection through query parameters.CVE-2023-37517: Missing "no cache" headers in HCL Leap permits sensitive data to be cached.https://patchthecve.com/cve/CVE-2023-37517.htmlhttps://patchthecve.com/cve/CVE-2023-37517.htmlWed, 17 Jun 2026 06:08:21 +0000LOW 3.2: Missing "no cache" headers in HCL Leap permits sensitive data to be cached.CVE-2022-42450: Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applicathttps://patchthecve.com/cve/CVE-2022-42450.htmlhttps://patchthecve.com/cve/CVE-2022-42450.htmlWed, 17 Jun 2026 05:04:56 +0000MEDIUM 4.6: Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.CVE-2022-42449: Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe https://patchthecve.com/cve/CVE-2022-42449.htmlhttps://patchthecve.com/cve/CVE-2022-42449.htmlWed, 17 Jun 2026 05:04:56 +0000MEDIUM 4.6: Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applicationsCVE-2022-27562: Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe https://patchthecve.com/cve/CVE-2022-27562.htmlhttps://patchthecve.com/cve/CVE-2022-27562.htmlWed, 17 Jun 2026 04:37:16 +0000MEDIUM 4.6: Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications.