high8.3
CVE-2022-38660
HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability.
Impact
HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Domino | before 9.0.1 Version 9.0.1 |