Known Vulnerabilities for Digital Experience by Hcltech
Listed below are 9 of the newest known vulnerabilities associated with "Digital Experience" by "Hcltech".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-67075 json | HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-21837 json | Not Provided | 2026-06-05 | 2026-07-23 | |
| CVE-2026-21826 json | Not Provided | 2026-06-05 | 2026-07-23 | |
| CVE-2026-21825 json | Not Provided | 2026-06-05 | 2026-07-23 | |
| CVE-2026-21766 json | The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials. Und... | Not Provided | 2026-08-05 | 2026-08-06 |
| CVE-2023-37538 json | HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In refl... | 6.1 - MEDIUM | 2023-10-11 | 2023-10-18 |
| CVE-2022-38653 json | In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded. | 5.4 - MEDIUM | 2022-12-19 | 2023-11-07 |
| CVE-2020-14255 json | HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via cr... | 7.5 - HIGH | 2021-02-02 | 2021-07-21 |
| CVE-2020-14223 json | HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a r... | 6.1 - MEDIUM | 2020-10-01 | 2020-10-08 |
| CVE-2020-14221 json | HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users. | 4.9 - MEDIUM | 2021-02-02 | 2021-07-21 |