CVE-2026-21825

hcltech digital experience compose, hcltech digital experience

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2026-21825

Katalog CVE

CVSS 6.1 · Medium EPSS 0,15%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada hcltech digital experience compose, hcltech digital experience. Skor CVSS 3.1 6.1 (Medium) menurut hcl.com.

Deskripsi (NVD)

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center.  An attacker could execute arbitrary JavaScript in the victim's browser.

Rincian

Terbit di NVD
5 Juni 2026
Terakhir diubah
23 Juli 2026
Status NVD
Analyzed
CVSS 3.1
6.1 (Medium), sumber hcl.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,15% peluang dieksploitasi; lebih tinggi dari 3,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
hcltech digital experience compose Versi 9.5
hcltech digital experience compose Versi 9.5 cf224
hcltech digital experience compose Versi 9.5 cf225
hcltech digital experience compose Versi 9.5 cf226
hcltech digital experience compose Versi 9.5 cf227
hcltech digital experience compose Versi 9.5 cf228
hcltech digital experience compose Versi 9.5 cf229
hcltech digital experience compose Versi 9.5 cf230
hcltech digital experience compose Versi 9.5 cf231
hcltech digital experience compose Versi 9.5 cf232
hcltech digital experience compose Versi 9.5 cf233
hcltech digital experience compose Versi 9.5 cf234
hcltech digital experience Versi 9.5
hcltech digital experience Versi 9.5 cf17
hcltech digital experience Versi 9.5 cf171
hcltech digital experience Versi 9.5 cf172
hcltech digital experience Versi 9.5 cf173
hcltech digital experience Versi 9.5 cf18
hcltech digital experience Versi 9.5 cf181
hcltech digital experience Versi 9.5 cf182
hcltech digital experience Versi 9.5 cf183
hcltech digital experience Versi 9.5 cf184
hcltech digital experience Versi 9.5 cf19
hcltech digital experience Versi 9.5 cf191
hcltech digital experience Versi 9.5 cf192
hcltech digital experience Versi 9.5 cf193
hcltech digital experience Versi 9.5 cf194
hcltech digital experience Versi 9.5 cf195
hcltech digital experience Versi 9.5 cf196
hcltech digital experience Versi 9.5 cf197
hcltech digital experience Versi 9.5 cf198
hcltech digital experience Versi 9.5 cf199
hcltech digital experience Versi 9.5 cf200
hcltech digital experience Versi 9.5 cf201
hcltech digital experience Versi 9.5 cf202
hcltech digital experience Versi 9.5 cf203
hcltech digital experience Versi 9.5 cf204
hcltech digital experience Versi 9.5 cf205
hcltech digital experience Versi 9.5 cf206
hcltech digital experience Versi 9.5 cf207
hcltech digital experience Versi 9.5 cf208
hcltech digital experience Versi 9.5 cf209
hcltech digital experience Versi 9.5 cf210
hcltech digital experience Versi 9.5 cf211
hcltech digital experience Versi 9.5 cf212
hcltech digital experience Versi 9.5 cf213
hcltech digital experience Versi 9.5 cf214
hcltech digital experience Versi 9.5 cf215
hcltech digital experience Versi 9.5 cf216
hcltech digital experience Versi 9.5 cf217
hcltech digital experience Versi 9.5 cf218
hcltech digital experience Versi 9.5 cf219
hcltech digital experience Versi 9.5 cf220
hcltech digital experience Versi 9.5 cf221
hcltech digital experience Versi 9.5 cf222
hcltech digital experience Versi 9.5 cf223
hcltech digital experience Versi 9.5 cf224
hcltech digital experience Versi 9.5 cf225
hcltech digital experience Versi 9.5 cf226
hcltech digital experience Versi 9.5 cf227

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 67 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.