CVE-2025-62328: Hclsoftware Nomad Server On Domino

Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days.

HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

• Hclsoftware Nomad Server On Domino: before 1.0.19 (fixed in 1.0.19)

Published 2026-03-11. Last modified 2026-06-17.