VYPR
← All advisories
Critical severity9.3NVD Advisory· Published Oct 11, 2023· Updated Jun 17, 2026

CVE-2023-37538

CVE-2023-37538

Description

HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).

Affected products

5
  • HCL Software/Digital Experiencecpe-rescue2 versions
    8.5, 9.0, 9.5+ 1 more
    • (no CPE)range: 8.5, 9.0, 9.5
    • (no CPE)
  • HCLTech/Digital Experience3 versions
    cpe:2.3:a:hcltech:digital_experience:8.5:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:hcltech:digital_experience:8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.