6.1

CVE-2026-21826

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Host header and cause the application to behave in unexpected ways.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Digital Experience Compose Version 9.5 Update -
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf224
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf225
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf226
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf227
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf228
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf229
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf230
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf231
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf232
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf233
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf234
Hcltech ≫ Digital Experience Version 9.5 Update -
Hcltech ≫ Digital Experience Version 9.5 Update cf17
Hcltech ≫ Digital Experience Version 9.5 Update cf171
Hcltech ≫ Digital Experience Version 9.5 Update cf172
Hcltech ≫ Digital Experience Version 9.5 Update cf173
Hcltech ≫ Digital Experience Version 9.5 Update cf18
Hcltech ≫ Digital Experience Version 9.5 Update cf181
Hcltech ≫ Digital Experience Version 9.5 Update cf182
Hcltech ≫ Digital Experience Version 9.5 Update cf183
Hcltech ≫ Digital Experience Version 9.5 Update cf184
Hcltech ≫ Digital Experience Version 9.5 Update cf19
Hcltech ≫ Digital Experience Version 9.5 Update cf191
Hcltech ≫ Digital Experience Version 9.5 Update cf192
Hcltech ≫ Digital Experience Version 9.5 Update cf193
Hcltech ≫ Digital Experience Version 9.5 Update cf194
Hcltech ≫ Digital Experience Version 9.5 Update cf195
Hcltech ≫ Digital Experience Version 9.5 Update cf196
Hcltech ≫ Digital Experience Version 9.5 Update cf197
Hcltech ≫ Digital Experience Version 9.5 Update cf198
Hcltech ≫ Digital Experience Version 9.5 Update cf199
Hcltech ≫ Digital Experience Version 9.5 Update cf200
Hcltech ≫ Digital Experience Version 9.5 Update cf201
Hcltech ≫ Digital Experience Version 9.5 Update cf202
Hcltech ≫ Digital Experience Version 9.5 Update cf203
Hcltech ≫ Digital Experience Version 9.5 Update cf204
Hcltech ≫ Digital Experience Version 9.5 Update cf205
Hcltech ≫ Digital Experience Version 9.5 Update cf206
Hcltech ≫ Digital Experience Version 9.5 Update cf207
Hcltech ≫ Digital Experience Version 9.5 Update cf208
Hcltech ≫ Digital Experience Version 9.5 Update cf209
Hcltech ≫ Digital Experience Version 9.5 Update cf210
Hcltech ≫ Digital Experience Version 9.5 Update cf211
Hcltech ≫ Digital Experience Version 9.5 Update cf212
Hcltech ≫ Digital Experience Version 9.5 Update cf213
Hcltech ≫ Digital Experience Version 9.5 Update cf214
Hcltech ≫ Digital Experience Version 9.5 Update cf215
Hcltech ≫ Digital Experience Version 9.5 Update cf216
Hcltech ≫ Digital Experience Version 9.5 Update cf217
Hcltech ≫ Digital Experience Version 9.5 Update cf218
Hcltech ≫ Digital Experience Version 9.5 Update cf219
Hcltech ≫ Digital Experience Version 9.5 Update cf220
Hcltech ≫ Digital Experience Version 9.5 Update cf221
Hcltech ≫ Digital Experience Version 9.5 Update cf222
Hcltech ≫ Digital Experience Version 9.5 Update cf223
Hcltech ≫ Digital Experience Version 9.5 Update cf224
Hcltech ≫ Digital Experience Version 9.5 Update cf225
Hcltech ≫ Digital Experience Version 9.5 Update cf226
Hcltech ≫ Digital Experience Version 9.5 Update cf227
Hcltech ≫ Digital Experience Version 9.5 Update cf228
Hcltech ≫ Digital Experience Version 9.5 Update cf229
Hcltech ≫ Digital Experience Version 9.5 Update cf230
Hcltech ≫ Digital Experience Version 9.5 Update cf231
Hcltech ≫ Digital Experience Version 9.5 Update cf232
Hcltech ≫ Digital Experience Version 9.5 Update cf233
Hcltech ≫ Digital Experience Version 9.5 Update cf234
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.04
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
psirt@hcl.com 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130849
Vendor Advisory