CVE-2022-42449CWE-434

HCL Domino Volt is affected by an unrestricted upload of a dangerous file type

Medium · published April 30, 2025

CVSS v3.1
4.6
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-04-30T21:01Z
EPSS history
Timeline
  • 30 APR 21:01Z
    HCL Domino Volt is affected by an unrestricted upload of a dangerous file type
    cvelistv5