CVE-2022-42449: Hcltech Domino Leap

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications

Affected products

• Hcltech Domino Leap: from 1.0, before 1.1.1 (fixed in 1.1.1)

Published 2025-04-30. Last modified 2026-06-17.