PatchTheCVEdomino vulnerabilities and fixes
Recent CVEs affecting domino, with upgrade or downgrade steps. 13 tracked.
domino has 13 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-07-08. Highest priority: CVE-2022-44754 (score 53/100).
- CVE-2024-23562 MEDIUM 5.3 DOWNGRADE A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information
- CVE-2023-37539 HIGH 8.4 DOWNGRADE The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2023-37495 MEDIUM 5.9 UPGRADE Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action o
- CVE-2023-28010 MEDIUM 4.0 DOWNGRADE In some configuration scenarios, the Domino server host name can be exposed
- CVE-2022-44754 CRITICAL 9.8 DOWNGRADE HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView
- CVE-2022-44752 CRITICAL 9.8 DOWNGRADE HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView
- CVE-2022-44750 CRITICAL 9.8 DOWNGRADE HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView
- CVE-2022-38660 HIGH 8.3 UPGRADE HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability
- CVE-2022-38654 MEDIUM 5.5 DOWNGRADE HCL Domino is susceptible to an information disclosure vulnerability
- CVE-2022-27558 MEDIUM 5.9 DOWNGRADE DOWNGRADE HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability
- CVE-2022-27547 MEDIUM 6.1 DOWNGRADE DOWNGRADE HCL iNotes is susceptible to a link to non-existent domain vulnerability
- CVE-2022-27546 HIGH 8.3 DOWNGRADE DOWNGRADE HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validatio
- CVE-2015-10039 MEDIUM 5.5 UPGRADE A vulnerability was found in dobos domino
FAQ
How do I fix domino vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is domino being exploited right now?
None of the tracked domino CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which domino CVE should I patch first?
CVE-2022-44754 currently ranks highest (53/100): HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.