5.9
Moyenne
CVE-2025-0254 HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to…
Description
HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226. An attacker could intercept and potentially alter communication between two parties.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| HCL Digital Experience | 9.5 | Pas de correctif indiqué |
Autres CVE de HCL Digital Experience
Les 4 CVE de HCL Digital Experience →
CVE-2022-38653
In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded
2.0
Faible
CVE-2022-38662
In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites
6.1
Moyenne
CVE-2021-27774
User input included in error response, which could be used in a phishing attack
3.1
Faible