| CVE-2025-0254 |
HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to…
|
5.9
Medium
|
Mar 20, 2025 |
| CVE-2022-38653 |
In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded
|
2.0
Low
|
Dec 15, 2022 |
| CVE-2022-38662 |
In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites
|
6.1
Medium
|
Dec 15, 2022 |
| CVE-2021-27774 |
User input included in error response, which could be used in a phishing attack
|
3.1
Low
|
Sep 22, 2022 |