CVE-2024-30129: HCL Nomad server on Domino is affected by a host header injection vulnerability

5.3 CVSS

Description

The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.

Classification

CVE ID: CVE-2024-30129

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.3

Affected Products

Vendor: HCL Software

Product: Nomad server on Domino

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.44% (scored less or equal to compared to others)

EPSS Date: 2025-02-03 (when was this score calculated)

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0117533

Timeline