Digital Experience (Hcltech) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 58 known versions, newest CVE from 2026-06-05. Vendor: Hcltech.
CVEs of Digital Experience
- CVE-2026-21837 - CVSS 8.8 (high), 2026-06-05: HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating…
- CVE-2026-21825 - CVSS 6.1 (medium), 2026-06-05: HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center. An attacker could execute arbitrary…
- CVE-2026-21826 - CVSS 6.1 (medium), 2026-06-05: HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection. An attacker can manipulate the Host header and cause…
- CVE-2025-62326 - CVSS 6.1 (medium), 2026-02-20: HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated privileges to…
- CVE-2025-31988 - CVSS 4.9 (medium), 2025-08-19: HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.
- CVE-2023-37538 - CVSS 9.3 (critical), 2023-10-11: HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must…
- CVE-2022-38653 - CVSS 5.4 (medium), 2022-12-19: In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.
- CVE-2020-4081 - CVSS 6.1 (medium), 2021-02-02: In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS).
- CVE-2020-14221 - CVSS 4.9 (medium), 2021-02-02: HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users.
- CVE-2020-14255 - CVSS 7.5 (high), 2021-02-02: HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect…
- CVE-2020-14223 - CVSS 6.1 (medium), 2020-10-01: HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persistent XSS…
