CVE-2025-0278: Hcltech Traveler

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error messages, debug logs, or responses to user requests.

Affected products

• Hcltech Traveler: up to and including 14.0.0.1

Published 2025-04-03. Last modified 2026-06-17.