CVE-2026-21825

概要

参考情報

• support.hcl-software.com/csm · Vendor Advisory

digital experience のその他の脆弱性

• CVE-2026-21837高 8.8HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.  An attacker may execute ar…
• CVE-2026-21826中 6.1HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Hos…
• CVE-2025-62326中 4.8HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated…
• CVE-2025-31988中 4.8HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.
• CVE-2023-37538中 6.1HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an a…