CVE-2023-37539

HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability

High · published June 6, 2024

CVSS v3.1
8.4
EPSS
0%
Percentile
22.1
In the wild
Unconfirmed
What it is

The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicking it.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.1th percentile
Published
2024-06-06T22:43Z
EPSS history
Timeline
  • 06 JUN 22:43Z
    HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability
    cvelistv5