What’s Vulnerable › Products

HCL Digital Experience vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your HCL Digital Experience version is affected

Latest HCL Digital Experience vulnerabilities

• CVE-2026-67075 — HCL Digital Experience is affected by improper input sanitation (CVSS 6.5)
• CVE-2026-21837 — HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API (CVSS 8.8)
• CVE-2026-21826 — HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection (CVSS 6.1)
• CVE-2026-21825 — HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center (CVSS 6.1)
• CVE-2025-62326 — HCL Digital Experience is susceptible to stored cross-site scripting (XSS) (CVSS 4.8)
• CVE-2025-31988 — HCL Digital Experience is susceptible to cross site scripting (XSS) (CVSS 4.8)
• CVE-2023-37538 — HCL Digital Experience is susceptible to cross site scripting (XSS) (CVSS 6.1)
• CVE-2022-38653 — HCL Digital Experience is susceptible to cross-site scripting (XSS) (CVSS 5.4)
• CVE-2020-4081 — (CVSS 6.1)
• CVE-2020-14255 — (CVSS 7.5)
• CVE-2020-14221 — (CVSS 4.9)
• CVE-2020-14223 — (CVSS 6.1)