CVE-2020-14222

2020-11-0516:52:20

HCL

www.cve.org

0.001 Low

EPSS

Percentile

33.8%

JSON

HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).

CNA Affected

[
  {
    "product": "HCL Digital Experience",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "8.5, 9.0, 9.5"
      }
    ]
  }
]

References

support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084769

0.001 Low

EPSS

Percentile

33.8%

JSON

Related for CVELIST:CVE-2020-14222