CVEs (4)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites.
|
User input included in error response, which could be used in a phishing attack. |
1Hcltech 1Hcl Digital Experience Jun 17, 2026 Nov 5, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some d...Show more |
1Hcltech 1Hcl Digital Experience Jun 17, 2026 Jun 11, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 "HCL Digital Experience is susceptible to Server Side Request Forgery." |