GCVE - cpe:2.3:a:hcltech:digital_experience:9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:digital_experience:9.0:*:*:*:*:*:*:*

part: a version: 9.0 update: *

Vendor	Hcltech (`be2dce80-cb79-5854-9fe6-9b4a1139ec3e`)
Product	Digital Experience (`02eaef90-a1c6-5e55-b53c-2fe013f2d26f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-31988`	vulnerable	2026-06-08 07:18:58.905110	HCL Digital Experience is susceptible to cross site scripting (XSS) MEDIUM (4.9) HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access. Published: 2025-08-19T18:12:07.098Z Updated: 2025-08-19T18:35:46.124Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37538`	vulnerable	2026-06-08 06:08:15.584737	HCL Digital Experience is susceptible to cross site scripting (XSS) CRITICAL (9.3) HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site). Published: 2023-10-11T12:53:10.796Z Updated: 2024-09-18T16:02:56.792Z Open on db.gcve.eu Reference links https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108006	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38653`	vulnerable	2026-06-08 05:47:16.743449	HCL Digital Experience is susceptible to cross-site scripting (XSS) LOW (2) In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded. Published: 2022-12-15T20:56:55.103Z Updated: 2025-04-18T14:56:02.038Z Open on db.gcve.eu Reference links https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102141	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-4081`	vulnerable	2026-06-08 05:25:58.846265	Details available In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS). Published: 2021-02-02T20:08:48.000Z Updated: 2024-08-04T07:52:20.917Z Open on db.gcve.eu Reference links https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085225	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14223`	vulnerable	2026-06-08 05:19:22.722150	Details available HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persistent XSS attack. Published: 2020-10-01T19:31:53.000Z Updated: 2024-08-04T12:39:36.216Z Open on db.gcve.eu Reference links https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082645	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14221`	vulnerable	2026-06-08 05:19:22.717637	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.