Lucene search
+L

563 matches found

Cvelist
Cvelist
added 2026/06/05 5:58 a.m.60 views

CVE-2026-21826 HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection. An attacker can manipulate the Host header and cause the application to behave in unexpected ways...

6.1CVSS0.00144EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/05 5:50 a.m.15 views

CVE-2026-21837

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover...

8.7CVSS5.9AI score0.0092EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/05 5:50 a.m.70 views

CVE-2026-21837 HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover...

8.7CVSS0.0092EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/05 5:50 a.m.23 views

CVE-2026-21837 HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover...

8.7CVSS5.9AI score0.0092EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/05 5:50 a.m.78 views

CVE-2026-21837

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could lead to a complete system takeover and data ...

8.8CVSS5.9AI score0.0092EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/06/05 12:00 a.m.15 views

HCL Digital Experience 安全漏洞

HCL Digital Experience is a digital experience platform and content delivery solution provided by the Indian company HCL. There is a security vulnerability in HCL Digital Experience. This vulnerability stems from an OS command injection issue in the digital asset management API. It could allow...

8.8CVSS5.8AI score0.0092EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.33 views

PT-2026-46906

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API. An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover...

8.7CVSS5.9AI score0.0092EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/06/05 12:00 a.m.16 views

HCL Digital Experience Compose 安全漏洞

HCL Digital Experience Compose is an enterprise-level content creation and digital experience management platform developed by the Indian company HCL. HCL Digital Experience Compose has a security vulnerability, which stems from a reflection-type cross-site scripting issue in the search center...

6.1CVSS5.5AI score0.00152EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/06/05 12:00 a.m.23 views

HCL Digital Experience和HCL Digital Experience Compose 安全漏洞

HCL Digital Experience and HCL Digital Experience Compose are both products of the Indian company HCL. HCL Digital Experience is a digital experience platform and content delivery solution. HCL Digital Experience Compose is an enterprise-level content creation and digital experience management...

6.1CVSS5.5AI score0.00144EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.36 views

PT-2026-46904

HCL Digital Experience Compose is affected by a reflected cross-site scripting XSS vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser...

6.1CVSS5.5AI score0.00152EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/05 12:00 a.m.32 views

PT-2026-46905

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection. An attacker can manipulate the Host header and cause the application to behave in unexpected ways...

6.1CVSS5.5AI score0.00144EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/04/14 7:23 p.m.12 views

CVE-2026-0233

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS6.2AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/04/13 9:31 a.m.14 views

EUVD-2026-21898

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS6.2AI score0.00175EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/13 7:17 a.m.7 views

CVE-2026-0233 Autonomous Digital Experience Manager: Improper validation of ADEM certificate

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS6.2AI score0.00175EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/13 7:17 a.m.8 views

CVE-2026-0233

A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...

5.4CVSS6.2AI score0.00175EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/04/13 7:17 a.m.39 views

CVE-2026-0233

CVE-2026-0233 affects Palo Alto Networks Autonomous Digital Experience Manager on Windows. The vulnerability is a certificate validation issue enabling an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges. Linked sources identify t...

8.8CVSS6.2AI score0.00175EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2026/04/13 12:00 a.m.15 views

Palo Alto Networks Autonomous Digital Experience Manager 安全漏洞

Palo Alto Networks Autonomous Digital Experience Manager is an artificial intelligence-based platform for monitoring and analyzing terminal and network experiences developed by Palo Alto Networks. There is a security vulnerability in Palo Alto Networks Autonomous Digital Experience Manager, which...

5.4CVSS6.1AI score0.00175EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/08 12:00 a.m.16 views

PT-2026-32052

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Autonomous Digital Experience Manager on Windows affected versions not specified Description A certificate validation issue exists in Palo Alto Networks Autonomous Digital Experience Manager on Windows. An unauthenticated...

8.8CVSS6.1AI score0.00175EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/02/22 1:28 a.m.10 views

CVE-2025-62326

HCL Digital Experience is susceptible to stored cross-site scripting XSS in the administrative user interface which would require elevated privileges to exploit...

6.1CVSS5.1AI score0.00154EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/20 8:25 p.m.8 views

CVE-2025-62326

HCL Digital Experience is susceptible to stored cross-site scripting XSS in the administrative user interface which would require elevated privileges to exploit...

4.8CVSS5.6AI score0.00154EPSS
SaveExploits0References1
Rows per page
Query Builder