CVE-2025-62328 — HCL Nomad server on Domino is affected by a missing default frame-ancestors directive

CVE-2025-62328

HCL Nomad server on Domino is affected by a missing default frame-ancestors directive PUBLISHED

Description (CNA)

HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive information via unspecified vectors.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / Nomad server on Domino	affected <1.0.19

CWE

CWE-1021

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127331

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.