Vulnerability Details CVE-2023-37538
HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.3%
CVSS Severity
CVSS v3 Score 9.3
References
Products affected by CVE-2023-37538
-
cpe:2.3:a:hcltech:digital_experience:8.5
-
cpe:2.3:a:hcltech:digital_experience:9.0
-
cpe:2.3:a:hcltech:digital_experience:9.5