CVE-2022-38660: Hcltech Domino

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user.  

Affected products

• Hcltech Domino: before 9.0.1 (fixed in 9.0.1); version 9.0.1 only

Published 2022-11-04. Last modified 2026-06-17.