Vulnerabilities (CVE)

Filtered by vendor Hcltech Subscribe
Filtered by product Domino
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-1712 1 Hcltech 1 Domino 2024-11-21 4.3 MEDIUM 5.9 MEDIUM
"A vulnerability in the TLS protocol implementation of the Domino server could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbacher's Oracle Threat (ROBOT) attack. An attacker could iteratively query a server running a vulnerable TLS stack implementation to perform cryptanalytic operations that may allow decryption of previously captured TLS sessions."
CVE-2024-23586 1 Hcltech 2 Domino, Hcl Nomad 2024-10-07 N/A 7.5 HIGH
HCL Nomad is susceptible to an insufficient session expiration vulnerability.   Under certain circumstances, an unauthenticated attacker could obtain old session information.