Hcl Digital Experience
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:hcl_digital_experience:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Hcl Digital Experience (0d5185e3-a20d-5cb2-b17f-19906e458d07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0254 |
vulnerable | 2026-06-08 07:02:24.071375 |
HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.
MEDIUM (5.9)
HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226. An attacker could intercept and potentially alter communication between two parties.
Published: 2025-03-20T14:02:37.826Z
Updated: 2025-03-20T15:02:17.242Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38662 |
vulnerable | 2026-06-08 05:47:16.783965 |
HCL Digital Experience is susceptible to open redirects
MEDIUM (6.1)
In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites.
Published: 2022-12-15T20:36:54.482Z
Updated: 2025-04-18T15:58:02.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-38653 |
vulnerable | 2026-06-08 05:47:16.741776 |
HCL Digital Experience is susceptible to cross-site scripting (XSS)
LOW (2)
In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.
Published: 2022-12-15T20:56:55.103Z
Updated: 2025-04-18T14:56:02.038Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27774 |
vulnerable | 2026-06-08 05:31:22.140331 |
An injection vulnerability affects HCL Digital Experience
LOW (3.1)
User input included in error response, which could be used in a phishing attack.
Published: 2022-09-22T20:20:10.000Z
Updated: 2025-05-27T15:03:23.144Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.