Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2022-38660

HCL XPages applications are susceptible to Cross Site Request Forgery (CSRF) vulnerability

Description

HCL XPages applications are susceptible to a Cross Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker could exploit this vulnerability to perform actions in the application on behalf of the logged in user.  

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software HCL Domino

Default version status: unaffected

  • v9affected

References