VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 5, 2026· Updated Jun 10, 2026

CVE-2026-21825

CVE-2026-21825

Description

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center.  An attacker could execute arbitrary JavaScript in the victim's browser.

Affected products

68
  • HCLTech/Digital Experience55 versions
    cpe:2.3:a:hcltech:digital_experience:9.5:-:*:*:*:*:*:*+ 54 more
    • cpe:2.3:a:hcltech:digital_experience:9.5:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf17:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf171:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf172:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf173:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf18:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf181:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf182:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf183:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf184:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf19:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf191:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf192:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf193:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf194:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf195:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf196:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf197:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf198:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf199:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf200:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf201:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf202:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf203:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf204:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf205:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf206:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf207:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf208:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf209:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf210:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf211:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf212:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf213:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf214:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf215:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf216:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf217:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf218:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf219:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf220:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf221:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf222:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf223:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf224:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf225:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf226:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf227:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf228:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf229:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf230:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf231:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf232:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf233:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience:9.5:cf234:*:*:*:*:*:*
  • HCLTech/Digital Experience Compose13 versions
    cpe:2.3:a:hcltech:digital_experience_compose:9.5:-:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf224:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf225:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf226:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf227:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf228:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf229:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf230:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf231:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf232:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf233:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf234:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.