Hcltech Hcl Digital Experience — known CVE vulnerabilities

Every CVE whose affected-product data names Hcltech Hcl Digital Experience, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-4101 — CVSS 9.8 (critical): "HCL Digital Experience is susceptible to Server Side Request Forgery."
• CVE-2020-14222 — CVSS 6.1 (medium): HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In…
• CVE-2022-38662 — CVSS 6.1 (medium): In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites.
• CVE-2021-27774 — CVSS 3.1 (low): User input included in error response, which could be used in a phishing attack.