high8.4
CVE-2023-37539
The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability.
Impact
The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicking it.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Domino | Versions 11.0, 12.0, 14.0 |