Vulnerability · Published Jun 6, 2024 · Assigned by HCL
CVE-2023-37539HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability
High 8.4
In plain English
A high-severity cross-site scripting in Domino Server from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.3%top 76.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicking it.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | Domino Server | 11, 12, 14 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H