HCL Software Digital Experience vulnerabilities

2 vulnerabilities

Known vulnerabilities in HCL Software Digital Experience, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9CVE-2025-31988hcl softwaredigital experience+1
EPSS score
0.24%
HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.9.3CVE-2023-37538hcl softwaredigital experience+1
EPSS score
0.41%
HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).