CVE-2025-0254

Name of the Vulnerable Software and Affected Versions HCL Digital Experience versions prior to 9.5 CF226

Description The issue concerns man-in-the-middle (MitM) attacks, where an attacker could intercept and potentially alter communication between two parties. This is related to the Ring API and dxclient components.

Recommendations For versions prior to 9.5 CF226, update to version 9.5 CF226 or later to resolve the issue. As a temporary workaround, consider restricting access to the Ring API and dxclient components to minimize the risk of exploitation.