CVE-2024-30145 MEDIUM

CVE-2024-30145: HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability

Vendor Hcl Software

Product HCL Domino Leap

Weakness CWE-79 · XSS

Published April 30, 2025

Last update May 1, 2025

CVSS base score

6.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed applications.

Key dates

April 30, 2025 CVE published

May 1, 2025 Record updated

External resources

Related vulnerabilities