Approved changes feed: RSS · Atom

cpe:2.3:a:hclsoftware:digital_experience:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHclsoftware (06fdb6ce-b596-52c8-8d32-13dd34a56cea)
ProductDigital Experience (525c0f26-31a4-5a20-8f9d-abe9864f3ebb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21837 vulnerable 2026-06-08 07:49:16.832024 HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API
HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.  An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise.
Published: 2026-06-05T05:50:58.161Z
Updated: 2026-06-09T14:38:17.102Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62326 vulnerable 2026-06-08 07:37:29.513296 HCL Digital Experience is susceptible to stored cross-site scripting (XSS)
MEDIUM (6.1)
HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated privileges to exploit.
Published: 2026-02-20T20:01:10.544Z
Updated: 2026-02-23T19:48:17.402Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.