8.8

CVE-2026-21837

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.  An attacker may execute arbitrary operating system commands, typically inheriting the privileges of the vulnerable application, which could possibly lead to a complete system takeover and data compromise.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hcltech ≫ Digital Experience Version 9.5 Update -
Hcltech ≫ Digital Experience Version 9.5 Update cf17
Hcltech ≫ Digital Experience Version 9.5 Update cf171
Hcltech ≫ Digital Experience Version 9.5 Update cf172
Hcltech ≫ Digital Experience Version 9.5 Update cf173
Hcltech ≫ Digital Experience Version 9.5 Update cf18
Hcltech ≫ Digital Experience Version 9.5 Update cf181
Hcltech ≫ Digital Experience Version 9.5 Update cf182
Hcltech ≫ Digital Experience Version 9.5 Update cf183
Hcltech ≫ Digital Experience Version 9.5 Update cf184
Hcltech ≫ Digital Experience Version 9.5 Update cf19
Hcltech ≫ Digital Experience Version 9.5 Update cf191
Hcltech ≫ Digital Experience Version 9.5 Update cf192
Hcltech ≫ Digital Experience Version 9.5 Update cf193
Hcltech ≫ Digital Experience Version 9.5 Update cf194
Hcltech ≫ Digital Experience Version 9.5 Update cf195
Hcltech ≫ Digital Experience Version 9.5 Update cf196
Hcltech ≫ Digital Experience Version 9.5 Update cf197
Hcltech ≫ Digital Experience Version 9.5 Update cf198
Hcltech ≫ Digital Experience Version 9.5 Update cf199
Hcltech ≫ Digital Experience Version 9.5 Update cf200
Hcltech ≫ Digital Experience Version 9.5 Update cf201
Hcltech ≫ Digital Experience Version 9.5 Update cf202
Hcltech ≫ Digital Experience Version 9.5 Update cf203
Hcltech ≫ Digital Experience Version 9.5 Update cf204
Hcltech ≫ Digital Experience Version 9.5 Update cf205
Hcltech ≫ Digital Experience Version 9.5 Update cf206
Hcltech ≫ Digital Experience Version 9.5 Update cf207
Hcltech ≫ Digital Experience Version 9.5 Update cf208
Hcltech ≫ Digital Experience Version 9.5 Update cf209
Hcltech ≫ Digital Experience Version 9.5 Update cf210
Hcltech ≫ Digital Experience Version 9.5 Update cf211
Hcltech ≫ Digital Experience Version 9.5 Update cf212
Hcltech ≫ Digital Experience Version 9.5 Update cf213
Hcltech ≫ Digital Experience Version 9.5 Update cf214
Hcltech ≫ Digital Experience Version 9.5 Update cf215
Hcltech ≫ Digital Experience Version 9.5 Update cf216
Hcltech ≫ Digital Experience Version 9.5 Update cf217
Hcltech ≫ Digital Experience Version 9.5 Update cf218
Hcltech ≫ Digital Experience Version 9.5 Update cf219
Hcltech ≫ Digital Experience Version 9.5 Update cf220
Hcltech ≫ Digital Experience Version 9.5 Update cf221
Hcltech ≫ Digital Experience Version 9.5 Update cf222
Hcltech ≫ Digital Experience Version 9.5 Update cf223
Hcltech ≫ Digital Experience Version 9.5 Update cf224
Hcltech ≫ Digital Experience Version 9.5 Update cf225
Hcltech ≫ Digital Experience Version 9.5 Update cf226
Hcltech ≫ Digital Experience Version 9.5 Update cf227
Hcltech ≫ Digital Experience Version 9.5 Update cf228
Hcltech ≫ Digital Experience Version 9.5 Update cf229
Hcltech ≫ Digital Experience Version 9.5 Update cf230
Hcltech ≫ Digital Experience Version 9.5 Update cf231
Hcltech ≫ Digital Experience Version 9.5 Update cf232
Hcltech ≫ Digital Experience Version 9.5 Update cf233
Hcltech ≫ Digital Experience Version 9.5 Update cf234
Hcltech ≫ Digital Experience Compose Version 9.5 Update -
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf224
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf225
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf226
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf227
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf228
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf229
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf230
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf231
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf232
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf233
Hcltech ≫ Digital Experience Compose Version 9.5 Update cf234
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.92% 0.556
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
psirt@hcl.com 8.7 0 0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130849
Vendor Advisory