HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection. An attacker can manipulate the Host header and cause the application to behave in unexpected ways.
References
| Link | Resource |
|---|---|
| https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130849 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
10 Jun 2026, 19:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130849 - Vendor Advisory | |
| First Time |
Hcltech
Hcltech digital Experience Compose Hcltech digital Experience |
|
| CPE | cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf224:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf224:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf220:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf197:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf212:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf228:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf202:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:-:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf191:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:-:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf229:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf18:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf232:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf204:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf228:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf207:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf219:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf226:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf214:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf198:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf203:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf201:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf171:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf192:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf230:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf199:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf206:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf213:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf195:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf225:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf210:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf200:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf183:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf225:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf194:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf215:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf17:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf173:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf233:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf208:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf230:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf229:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf181:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf227:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf19:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf226:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf223:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf234:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf193:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf233:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf182:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf232:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf231:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf209:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf216:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf205:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf221:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf172:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf196:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf211:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf227:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf217:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf222:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf218:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience_compose:9.5:cf234:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf231:*:*:*:*:*:* cpe:2.3:a:hcltech:digital_experience:9.5:cf184:*:*:*:*:*:* |
05 Jun 2026, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-05 07:16
Updated : 2026-06-10 19:24
NVD link : CVE-2026-21826
Mitre link : CVE-2026-21826
CVE.ORG link : CVE-2026-21826
JSON object : View
Products Affected
hcltech
- digital_experience_compose
- digital_experience
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')