Approved changes feed: RSS · Atom

cpe:2.3:a:hclsoftware:hcl_digital_experience_and_digital_experience_compose:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHclsoftware (06fdb6ce-b596-52c8-8d32-13dd34a56cea)
ProductHcl Digital Experience And Digital Experience Compose (a1a34f77-50b5-59a1-acef-6e62f1e68ae4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21766 vulnerable 2026-09-16 04:34:13.166611 HCL Digital Experience and Digital Experience Compose insufficiently protects credentials
MEDIUM (5.4)
The default login portlet in HCL Digital Experience and Digital Experience Compose insufficiently protects credentials.  Under certain very specific use cases and specific configurations, sensitive information may be written to web server logs.  This only affects applications using the default login portlet.
Published: 2026-08-05T20:11:19.443Z
Updated: 2026-08-06T13:12:46.283Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.