GCVE - cpe:2.3:a:hcltech:digital_experience:9.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hcltech:digital_experience:9.5:*:*:*:*:*:*:*

part: a version: 9.5 update: *

Vendor	Hcltech (`be2dce80-cb79-5854-9fe6-9b4a1139ec3e`)
Product	Digital Experience (`02eaef90-a1c6-5e55-b53c-2fe013f2d26f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-62326`	vulnerable	2026-06-08 07:37:29.514146	HCL Digital Experience is susceptible to stored cross-site scripting (XSS) MEDIUM (6.1) HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated privileges to exploit. Published: 2026-02-20T20:01:10.544Z Updated: 2026-02-23T19:48:17.402Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0128824	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-31988`	vulnerable	2026-06-08 07:18:58.905947	HCL Digital Experience is susceptible to cross site scripting (XSS) MEDIUM (4.9) HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access. Published: 2025-08-19T18:12:07.098Z Updated: 2025-08-19T18:35:46.124Z Open on db.gcve.eu Reference links https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123435	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37538`	vulnerable	2026-06-08 06:08:15.585366	HCL Digital Experience is susceptible to cross site scripting (XSS) CRITICAL (9.3) HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site). Published: 2023-10-11T12:53:10.796Z Updated: 2024-09-18T16:02:56.792Z Open on db.gcve.eu Reference links https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108006	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-38653`	vulnerable	2026-06-08 05:47:16.743988	HCL Digital Experience is susceptible to cross-site scripting (XSS) LOW (2) In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded. Published: 2022-12-15T20:56:55.103Z Updated: 2025-04-18T14:56:02.038Z Open on db.gcve.eu Reference links https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102141	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-4081`	vulnerable	2026-06-08 05:25:58.846994	Details available In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS). Published: 2021-02-02T20:08:48.000Z Updated: 2024-08-04T07:52:20.917Z Open on db.gcve.eu Reference links https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085225	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14255`	vulnerable	2026-06-08 05:19:22.804498	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14223`	vulnerable	2026-06-08 05:19:22.722180	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14221`	vulnerable	2026-06-08 05:19:22.718195	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.