Hcltech Digital Experience vulnerabilities

• hcltech digital experience, digital experience compose, hclsoftware dx compose +2 more HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center CVE-2026-21825 6.1 MediumJune 5, 2026
• hcltech digital experience, digital experience compose, hclsoftware digital experience & dx compose +2 more HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection CVE-2026-21826 6.1 MediumJune 5, 2026
• hclsoftware digital experience, hcltech digital experience compose +1 more HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API CVE-2026-21837 8.7 HighJune 5, 2026
• hclsoftware digital experience HCL Digital Experience is susceptible to stored cross-site scripting (XSS) CVE-2025-62326 6.1 MediumFebruary 20, 2026
• hcl software digital experience HCL Digital Experience is susceptible to cross site scripting (XSS) CVE-2025-31988 4.9 MediumAugust 19, 2025
• hcl software digital experience HCL Digital Experience is susceptible to cross site scripting (XSS) CVE-2023-37538 9.3 CriticalOctober 11, 2023
• hcl software digital experience HCL Digital Experience is susceptible to cross-site scripting (XSS) CVE-2022-38653 2.0 LowDecember 15, 2022
• hcl software digital experience, hcltech hcl digital experience +1 more HCL Digital Experience is susceptible to open redirects CVE-2022-38662 6.1 MediumDecember 15, 2022
• hcl software digital experience, hcltech hcl digital experience +1 more An injection vulnerability affects HCL Digital Experience CVE-2021-27774 3.1 LowSeptember 22, 2022
• hcl software digital experience In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS). CVE-2020-4081 6.1 MediumFebruary 2, 2021
• hcl software digital experience HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to... CVE-2020-14255 7.5 HighFebruary 2, 2021
• hcl software digital experience HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users. CVE-2020-14221 4.9 MediumFebruary 2, 2021
• hcl software digital experience, hcltech hcl digital experience +1 more HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One... CVE-2020-14222 6.1 MediumNovember 5, 2020
• hcl software digital experience HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The... CVE-2020-14223 6.1 MediumOctober 1, 2020
• hcltech hcl digital experience "HCL Digital Experience is susceptible to Server Side Request Forgery." CVE-2020-4101 9.8 CriticalJune 11, 2020