6.1

CVE-2026-21825: hclsoftware dx compose Cross-site Scripting

CVSS: 6.1v3.1MediumAnalyzed
Published 05-06-2026Last modified 09-06-2026
Open JSON

Vulnerability summary

CVE-2026-21825 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in hclsoftware dx compose. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 3.9% of scored vulnerabilities.

Overall risk
24/100
0100
Low · default modelHow is this calculated?
CVSS score
6.1/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.15%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 05-06-2026
    PublishedVulnerability first disclosed.
  2. 09-06-2026
    Last modifiedVulnerability information updated.

Description

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center.  An attacker could execute arbitrary JavaScript in the victim's browser.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

4%

Versus all other CVEs

30-day change

0.00 pp

From 0.15% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Hcltech2 products
  • digital_experience9.5 | 9.5:cf17 | 9.5:cf171 | 9.5:cf172 | 9.5:cf173 | 9.5:cf18 | 9.5:cf181 | 9.5:cf182 | 9.5:cf183 | 9.5:cf184 | 9.5:cf19 | 9.5:cf191 | 9.5:cf192 | 9.5:cf193 | 9.5:cf194 | 9.5:cf195 | 9.5:cf196 | 9.5:cf197 | 9.5:cf198 | 9.5:cf199 | 9.5:cf200 | 9.5:cf201 | 9.5:cf202 | 9.5:cf203 | 9.5:cf204 | 9.5:cf205 | 9.5:cf206 | 9.5:cf207 | 9.5:cf208 | 9.5:cf209 | 9.5:cf210 | 9.5:cf211 | 9.5:cf212 | 9.5:cf213 | 9.5:cf214 | 9.5:cf215 | 9.5:cf216 | 9.5:cf217 | 9.5:cf218 | 9.5:cf219 | 9.5:cf220 | 9.5:cf221 | 9.5:cf222 | 9.5:cf223 | 9.5:cf224 | 9.5:cf225 | 9.5:cf226 | 9.5:cf227 | 9.5:cf228 | 9.5:cf229 | 9.5:cf230 | 9.5:cf231 | 9.5:cf232 | 9.5:cf233 | 9.5:cf234
  • digital_experience_compose9.5 | 9.5:cf224 | 9.5:cf225 | 9.5:cf226 | 9.5:cf227 | 9.5:cf228 | 9.5:cf229 | 9.5:cf230 | 9.5:cf231 | 9.5:cf232 | 9.5:cf233 | 9.5:cf234
Hclsoftware1 product

2 vendors · 3 products

References

1 links