Hcltech Traveler vulnerabilities
6 CVEs affecting Hcltech Traveler, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21783, published 2026-03-24.
More from Hcltech.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2019-4409, published 2019-10-18. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to…
- CVE-2022-27561, published 2022-09-15. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).
- CVE-2021-27778, published 2022-06-01. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could…
- CVE-2025-0279, published 2025-04-03. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack…
- CVE-2025-0278, published 2025-04-03. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error messages, debug logs, or responses to user…
- CVE-2026-21783, published 2026-03-24. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Traveler is affected by sensitive information disclosure. The application generates some error messages that provide detailed information about errors and failures, such as internal paths, file…