Hcl Software Domino Server vulnerabilities

CVE-2024-23562 [HIGH] CWE-200 CVE-2024-23562: A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information A security vulnerability in HCL Domino could allow disclosure of sensitive configuration information. A remote unauthenticated attacker could exploit this vulnerability to obtain information to launch further attacks against the affected system.

CVE-2023-37539 [MEDIUM] CWE-79 CVE-2023-37539: The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An The Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. An attacker with the ability to edit documents in the catalog application/database created from this template can embed a cross site scripting attack. The attack would be activated by an end user clicking it.