CVE-2026-21825

EUVD-2026-34788
HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center.  An attacker could execute arbitrary JavaScript in the victim's browser.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Affected Products (NVD)
VendorProductVersion
hcltechdigital_experience_compose
9.5
hcltechdigital_experience_compose
9.5:cf224
hcltechdigital_experience_compose
9.5:cf225
hcltechdigital_experience_compose
9.5:cf226
hcltechdigital_experience_compose
9.5:cf227
hcltechdigital_experience_compose
9.5:cf228
hcltechdigital_experience_compose
9.5:cf229
hcltechdigital_experience_compose
9.5:cf230
hcltechdigital_experience_compose
9.5:cf231
hcltechdigital_experience_compose
9.5:cf232
hcltechdigital_experience_compose
9.5:cf233
hcltechdigital_experience_compose
9.5:cf234
hcltechdigital_experience
9.5
hcltechdigital_experience
9.5:cf17
hcltechdigital_experience
9.5:cf171
hcltechdigital_experience
9.5:cf172
hcltechdigital_experience
9.5:cf173
hcltechdigital_experience
9.5:cf18
hcltechdigital_experience
9.5:cf181
hcltechdigital_experience
9.5:cf182
hcltechdigital_experience
9.5:cf183
hcltechdigital_experience
9.5:cf184
hcltechdigital_experience
9.5:cf19
hcltechdigital_experience
9.5:cf191
hcltechdigital_experience
9.5:cf192
hcltechdigital_experience
9.5:cf193
hcltechdigital_experience
9.5:cf194
hcltechdigital_experience
9.5:cf195
hcltechdigital_experience
9.5:cf196
hcltechdigital_experience
9.5:cf197
hcltechdigital_experience
9.5:cf198
hcltechdigital_experience
9.5:cf199
hcltechdigital_experience
9.5:cf200
hcltechdigital_experience
9.5:cf201
hcltechdigital_experience
9.5:cf202
hcltechdigital_experience
9.5:cf203
hcltechdigital_experience
9.5:cf204
hcltechdigital_experience
9.5:cf205
hcltechdigital_experience
9.5:cf206
hcltechdigital_experience
9.5:cf207
hcltechdigital_experience
9.5:cf208
hcltechdigital_experience
9.5:cf209
hcltechdigital_experience
9.5:cf210
hcltechdigital_experience
9.5:cf211
hcltechdigital_experience
9.5:cf212
hcltechdigital_experience
9.5:cf213
hcltechdigital_experience
9.5:cf214
hcltechdigital_experience
9.5:cf215
hcltechdigital_experience
9.5:cf216
hcltechdigital_experience
9.5:cf217
hcltechdigital_experience
9.5:cf218
hcltechdigital_experience
9.5:cf219
hcltechdigital_experience
9.5:cf220
hcltechdigital_experience
9.5:cf221
hcltechdigital_experience
9.5:cf222
hcltechdigital_experience
9.5:cf223
hcltechdigital_experience
9.5:cf224
hcltechdigital_experience
9.5:cf225
hcltechdigital_experience
9.5:cf226
hcltechdigital_experience
9.5:cf227
hcltechdigital_experience
9.5:cf228
hcltechdigital_experience
9.5:cf229
hcltechdigital_experience
9.5:cf230
hcltechdigital_experience
9.5:cf231
hcltechdigital_experience
9.5:cf232
hcltechdigital_experience
9.5:cf233
hcltechdigital_experience
9.5:cf234
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130849