Hcltech Traveler To Do vulnerabilities

2 CVEs affecting Hcltech Traveler To Do, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-37513, published 2023-08-11.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-37511, published 2023-08-11. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. If certain App Transport Security (ATS) settings are set in a certain manner, insecure loading of web content can be achieved.
• CVE-2023-37513, published 2023-08-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information.