CVE-2023-37538

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

Cross site scripting

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

CVE-2023-37538 HCL Digital Experience is susceptible to cross site scripting (XSS)

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

CVE-2023-37538 HCL Digital Experience is susceptible to cross site scripting (XSS)

HCL Digital Experience is susceptible to cross site scripting XSS. One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism email, other web site...

PT-2023-26013 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue concerns cross site scripting XSS, specifically reflected XSS, where an attacker must trick a victim into clicking a crafted URL sent through various means like ema...

CVE-2022-38653

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38662

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38653

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

Code injection

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

Cross site scripting

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

HCL Digital Experience 输入验证错误漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. HCL Digital Experience suffers from an input validation error vulnerability that stems from an attacker being able to construct URLs to redirect users to untrusted sites...

HCL Technologies HCL Digital Experience 跨站脚本漏洞

HCL Technologies HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies, USA. HCL Technologies HCL Digital Experience suffers from a security vulnerability that originates from an attacker being able to construct customized cross-site...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38653

HCL Digital Experience is reported vulnerable to a cross-site scripting (XSS) issue where a customized payload can be served unencoded in the application. The CVE-2022-38653 entry lists a CVSS v3.1 base score of 5.4 (MEDIUM) with NETWORK attack vector, LOW impact on confidentiality/integrity and ...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662

In HCL Digital Experience, the CVE-2022-38662 issue is an open redirect vulnerability caused by URL construction that can redirect users to untrusted sites. Affected product: HCL Digital Experience (web/DX URL handling). Impact: potential user redirection to attacker-controlled or untrusted desti...

PT-2022-24503 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue allows a customized XSS payload to be constructed and served in the application unencoded. Recommendations: At the moment, there is no information about a newer...