CVE-2025-62328

Publication date

2026-03-11 22:04:11

Family

HCL

State

PUBLISHED

Description

HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sensitive information via unspecified vectors.