Hcl Digital Experience (Hcltech) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-12-19. Vendor: Hcltech.

CVEs of Hcl Digital Experience

• CVE-2022-38662 - CVSS 6.1 (medium), 2022-12-19:  In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites.
• CVE-2021-27774 - CVSS 5.4 (medium), 2022-09-22: User input included in error response, which could be used in a phishing attack.
• CVE-2020-14222 - CVSS 6.1 (medium), 2020-11-05: HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an…
• CVE-2020-4101 - CVSS 9.8 (critical), 2020-06-11: "HCL Digital Experience is susceptible to Server Side Request Forgery."