Hcltech Nomad Server On Domino vulnerabilities

4 CVEs affecting Hcltech Nomad Server On Domino, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-30132, published 2024-10-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-30128, published 2024-09-25. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. HCL Nomad server on Domino is affected by an open proxy vulnerability in which an unauthenticated attacker can mask their original source IP address. This may enable an attacker to trick the user…
CVE-2024-23588, published 2024-07-05. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Nomad server on Domino fails to properly handle users configured with limited Domino access resulting in a possible denial of service vulnerability.
CVE-2024-30132, published 2024-10-01. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive information via unspecified vectors.
CVE-2024-30130, published 2024-07-19. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information.