CVE-2026-21825

Опубликовано: 05 июн. 2026

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser.

Ссылки

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130849
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hcltech:digital_experience_compose:9.5:-:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf224:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf225:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf226:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf227:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf228:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf229:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf230:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf231:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf232:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf233:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf234:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:hcltech:digital_experience:9.5:-:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf17:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf171:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf172:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf173:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf18:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf181:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf182:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf183:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf184:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf19:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf191:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf192:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf193:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf194:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf195:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf196:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf197:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf198:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf199:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf200:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf201:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf202:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf203:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf204:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf205:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf206:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf207:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf208:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf209:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf210:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf211:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf212:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf213:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf214:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf215:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf216:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf217:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf218:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf219:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf220:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf221:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf222:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf223:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf224:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf225:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf226:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf227:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf228:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf229:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf230:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf231:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf232:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf233:*:*:*:*:*:*

cpe:2.3:a:hcltech:digital_experience:9.5:cf234:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00152

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-26cp-fff5-jqv5