What’s Vulnerable › Vulnerabilities
CVE-2024-30129: HCL Nomad server on Domino is affected by a host header injection vulnerability
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-06 · updated 2026-06-17
- Weakness: CWE-644
Description
The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.
Affected products
- HCL Software HCL Nomad for web: before 1.0.14 — fixed in 1.0.14
How to fix
Upgrade to a fixed version: HCL Software HCL Nomad for web 1.0.14. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-30129 or the next vulnerability affects your stack