Hcltech Traveler Companion vulnerabilities

3 CVEs affecting Hcltech Traveler Companion, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-37512, published 2023-08-11.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-14263, published 2021-10-21. Low severity, CVSS 3.9. EPSS: 0.2% chance of exploitation in the next 30 days. "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"
• CVE-2023-37512, published 2023-08-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information.
• CVE-2020-14264, published 2021-10-25. Low severity, CVSS 3.9. EPSS: 0.2% chance of exploitation in the next 30 days. "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK"