CVE-2022-38653

HCL Digital Experience is susceptible to cross-site scripting (XSS)

Low · published December 15, 2022

CVSS v3.1
2.0
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.

The record
Technical detail
CVSS v3.1
2.0 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00312 · 22.8th percentile
Published
2022-12-15T20:56Z
EPSS history
Timeline
  • 15 DEC 20:56Z
    HCL Digital Experience is susceptible to cross-site scripting (XSS)
    cvelistv5