← Database

CVE-2022-38660

HIGH CVSS: 8.3 Published: 2022-11-04 Modified: 2026-06-17

Description

HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user.  

Affected Platforms

Hcltech Domino

Weakness Type

CWE-352, CWE-352

References