Hclsoftware Digital Experience vulnerabilities

• hclsoftware digital experience HCL Digital Experience is affected by improper input sanitation CVE-2026-67075 6.5 MediumOctober 1, 2026
• hclsoftware hcl digital experience and digital experience compose HCL Digital Experience and Digital Experience Compose insufficiently protects credentials CVE-2026-21766 5.4 MediumAugust 5, 2026
• hcltech digital experience, digital experience compose, hclsoftware digital experience & dx compose +2 more HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection CVE-2026-21826 6.1 MediumJune 5, 2026
• hclsoftware digital experience, hcltech digital experience compose +1 more HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API CVE-2026-21837 8.7 HighJune 5, 2026
• hclsoftware digital experience HCL Digital Experience is susceptible to stored cross-site scripting (XSS) CVE-2025-62326 6.1 MediumFebruary 20, 2026
• hcl software digital experience HCL Digital Experience is susceptible to cross site scripting (XSS) CVE-2025-31988 4.9 MediumAugust 19, 2025
• hcl software digital experience HCL Digital Experience is susceptible to cross site scripting (XSS) CVE-2023-37538 9.3 CriticalOctober 11, 2023