HCL Domino

productDE

cpe:/a:hcltech:domino:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

6critical11high13medium8low

updated 2026-10-27

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2021-26291US	critical9.1	8.69% (95th)	Exploit	no fix	2021-04-23	—
CVE-2022-0155US	medium6.5	2.43% (84th)	Exploit	no fix	2022-01-10	—
CVE-2019-20445US	critical9.1	13.8% (97th)	—	no fix	2020-01-29	—
CVE-2019-20444US	critical9.1	8.91% (95th)	—	no fix	2020-01-29	—
CVE-2019-16869US	high7.5	8.64% (95th)	—	no fix	2019-09-26	—
CVE-2020-2803US	high8.3	6.23% (94th)	—	no fix	2020-04-15	—
CVE-2020-2830US	medium5.3	4.95% (92nd)	—	no fix	2020-04-15	—
CVE-2020-2781US	medium5.3	4.95% (92nd)	—	no fix	2020-04-15	—
CVE-2019-18197US	high7.5	4.45% (91st)	—	no fix	2019-10-18	—
CVE-2020-2757US	low3.7	4.25% (91st)	—	no fix	2020-04-15	—
CVE-2020-2756US	low3.7	4.25% (91st)	—	no fix	2020-04-15	—
CVE-2020-2754US	low3.7	4.16% (91st)	—	no fix	2020-04-15	—
CVE-2020-2805US	high8.3	4.05% (91st)	—	no fix	2020-04-15	—
CVE-2020-2755US	low3.7	3.93% (90th)	—	no fix	2020-04-15	—
CVE-2020-2773US	low3.7	3.88% (90th)	—	no fix	2020-04-15	—
CVE-2021-3918US	critical9.8	3.83% (90th)	—	no fix	2021-11-13	—
CVE-2020-2800US	medium4.8	2.88% (87th)	—	no fix	2020-04-15	—
CVE-2020-2816US	high7.5	2.77% (86th)	—	no fix	2020-04-15	—
CVE-2020-2764US	low3.7	2.53% (85th)	—	no fix	2020-04-15	—
CVE-2020-2778US	low3.7	2.36% (84th)	—	no fix	2020-04-15	—
CVE-2022-25878US	high7.5	2.33% (83rd)	—	no fix	2022-05-27	—
CVE-2020-2767US	medium4.8	2.16% (82nd)	—	no fix	2020-04-15	—
CVE-2022-0355US	high7.5	2.02% (81st)	—	no fix	2022-01-26	—
CVE-2021-43816US	critical9.1	1.68% (77th)	—	no fix	2022-01-05	—
CVE-2022-0235US	medium6.1	1.65% (76th)	—	no fix	2022-01-16	—
CVE-2020-7789US	medium5.6	1.59% (75th)	—	no fix	2020-12-11	—
CVE-2022-24450US	high8.8OT elevated	1.33% (71st)	—	no fix	2022-02-08	—
CVE-2021-22963US	medium6.1	1.17% (67th)	—	no fix	2021-10-14	—
CVE-2021-43565US	high7.5	1.12% (66th)	—	no fix	2022-09-06	—
CVE-2026-34478US	high7.5	0.97% (62nd)	—	no fix	2026-04-10	—
CVE-2022-0122US	medium6.1	0.84% (58th)	—	no fix	2022-01-06	—
CVE-2021-27764US	medium6.5OT elevated	0.55% (46th)	—	no fix	2022-05-06	—
CVE-2026-34479US	high7.5	0.53% (45th)	—	no fix	2026-04-10	—
CVE-2022-30187US	low1.9OT elevated	0.53% (45th)	—	no fix	2022-07-12	—
CVE-2020-7608US	medium5.3	0.51% (44th)	—	no fix	2020-03-16	—
CVE-2026-40023US	medium5.3	0.50% (43rd)	—	no fix	2026-04-10	—
CVE-2021-23566US	medium5.5	0.44% (38th)	—	no fix	2022-01-14	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-26414 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')3 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-116Improper Encoding or Escaping of Output2 CVEs
CWE-20Improper Input Validation2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan