PT-2025-18330 · Hcl · Hcl Domino Volt

Published 2025-04-30 · Updated 2025-04-30 · CVE-2022-27562

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HCL Domino Volt (affected versions not specified)

Description The issue concerns an unsafe default file type filter policy that allows the upload of .html files and the execution of unsafe JavaScript in deployed applications. This could potentially lead to security risks, as it enables the execution of JavaScript code that may not be secure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-27562

Affected Products

Hcl Domino Volt

References · 6

• https://osv.dev/vulnerability/CVE-2022-27562 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27562 · Security Note
• https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0120722 · Vendor Advisory
• https://twitter.com/CVEnew/status/1917689185898750359 · Twitter Post
• https://t.me/cvedetector/24154 · Telegram Post
• https://t.me/cvetracker/22758 · Telegram Post