What’s Vulnerable › Products

Hcltech Digital Experience Compose vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Hcltech Digital Experience Compose version is affected

Latest Hcltech Digital Experience Compose vulnerabilities

• CVE-2026-21837 — HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API (CVSS 8.8)
• CVE-2026-21826 — HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection (CVSS 6.1)
• CVE-2026-21825 — HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center (CVSS 6.1)