Login Request a demo
DE
Product
Digital Experience
by Hcltech · last CVE Jun 5, 2026
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 2Medium 9Low 0
Severity
All severities11Critical0High2Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Digital Experience to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-21837
8.8
1%
Jun 5
HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API
Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +34 more
CVE-2020-14255
7.5
1%
Feb 2
HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests
Affected: 9.5
CVE-2026-21825
6.1
0%
Jun 5
HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center
Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +34 more
CVE-2026-21826
6.1
0%
Jun 5
HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection
Affected: 9.5; 9.5; 9.5; 9.5; 9.5; 9.5; +34 more
CVE-2023-37538
6.1
0%
Oct 11
HCL Digital Experience is susceptible to cross site scripting (XSS)
Affected: 8.5; 9.0; 9.5
CVE-2020-4081
6.1
1%
Feb 2
In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS)
Affected: 8.5; 9.0; 9.5
CVE-2020-14223
6.1
1%
Oct 1
HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS)
Affected: 8.5; 9.0; 9.5
CVE-2022-38653
5.4
0%
Dec 19
In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded
Affected: 8.5; 9.0; 9.5
CVE-2020-14221
4.9
1%
Feb 2
HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users
Affected: 8.5; 9.0; 9.5
CVE-2025-62326
4.8
0%
Feb 20
HCL Digital Experience is susceptible to stored cross-site scripting (XSS)
Affected: 9.5
CVE-2025-31988
4.8
0%
Aug 19
HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access
Affected: 8.5; 9.0; 9.5
Showing 11