Traveler Hcltech Traveler

Do you want an email whenever new security vulnerabilities are reported in Hcltech Traveler?

By the Year

In 2024 there have been 0 vulnerabilities in Hcltech Traveler . Traveler did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 0 0.00
2022 2 4.80
2021 0 0.00
2020 0 0.00
2019 1 5.40
2018 0 0.00

It may take a day or so for new Traveler vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Hcltech Traveler Security Vulnerabilities

There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).

CVE-2022-27561 4.8 - Medium - September 15, 2022

There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).

XSS

HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages

CVE-2021-27778 4.8 - Medium - June 01, 2022

HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site.

XSS

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks

CVE-2019-4409 5.4 - Medium - October 18, 2019

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the entered file name. If the file name is not escaped in the returned error page, it could expose a cross-site scripting (XSS) vulnerability.

XSS

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Hcltech Traveler or by Hcltech? Click the Watch button to subscribe.

Hcltech
Vendor

subscribe