Hclsoftware Digital Experience vulnerabilities
3 vulnerabilities
Known vulnerabilities in Hclsoftware Digital Experience, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-62326hclsoftwaredigital experience+1
EPSS score0.18%
HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated privileges to exploit.CVE-2026-21837hclsoftwaredigital experience+2EPSS score0.92%
HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise.CVE-2026-67075hclsoftwaredigital experienceEPSS score0.19%
HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged in content spoofing from a trusted domain. Apply HCL Digital Experience 9.5 CF238 or later to address this.