CVE-2022-42449

5.4 mediumEPSS 0.3%

Medium (5.4) in hcltech domino leap. EPSS 0.3% chance of exploitation in the next 30 days.

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript in deployed applications

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2025-04-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19