Hcl Traveler
Approved changes feed: RSS · Atom
cpe:2.3:a:hcl_software:hcl_traveler:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hcl Software (ae8892dc-f7dc-53a3-b2bf-67149bcc5847) |
|---|---|
| Product | Hcl Traveler (3f8e41f5-ff14-52c4-97e9-3c5d1ef8c96b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0279 |
vulnerable | 2026-06-08 07:02:24.106623 |
HCL Traveler is affected by generation of error messages containing sensitive information
MEDIUM (4.3)
HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks.
Published: 2025-04-03T21:48:01.004Z
Updated: 2025-04-07T16:31:57.411Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0278 |
vulnerable | 2026-06-08 07:02:24.105049 |
An internal path disclosure vulnerability affects HCL Traveler
MEDIUM (4.3)
HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error messages, debug logs, or responses to user requests.
Published: 2025-04-03T22:07:59.761Z
Updated: 2025-04-04T18:32:44.020Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27561 |
vulnerable | 2026-06-08 05:41:56.716519 |
HCL Traveler is susceptible to a Reflected Cross-Site Scripting vulnerability in the web admin (LotusTraveler.nsf)
HIGH (7.5)
There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).
Published: 2022-09-15T21:50:16.252Z
Updated: 2024-09-16T20:32:02.245Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27778 |
vulnerable | 2026-06-08 05:31:22.146418 |
HCL Traveler is susceptible to a cross-site scripting vulnerability which could allow an attacker to execute a malicious script to access sensitive information.
MEDIUM (4.9)
HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site.
Published: 2022-05-31T23:50:11.060Z
Updated: 2024-09-17T00:06:06.792Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.