Approved changes feed: RSS · Atom

cpe:2.3:a:hcl_software:digital_experience:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847)
ProductDigital Experience (09064c70-97fb-52c4-8a71-eaf671288bb7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-31988 vulnerable 2026-06-08 07:18:58.903066 HCL Digital Experience is susceptible to cross site scripting (XSS)
MEDIUM (4.9)
HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.
Published: 2025-08-19T18:12:07.098Z
Updated: 2025-08-19T18:35:46.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37538 vulnerable 2026-06-08 06:08:15.583492 HCL Digital Experience is susceptible to cross site scripting (XSS)
CRITICAL (9.3)
HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).
Published: 2023-10-11T12:53:10.796Z
Updated: 2024-09-18T16:02:56.792Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.