Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2025-62328

HCL Nomad server on Domino is affected by a missing default frame-ancestors directive

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HCL

Description

HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCLSoftware Nomad server on Domino

Default version status: unaffected

  • <1.0.19affected

References