Traveler (Hcltech) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 33 known versions, newest CVE from 2026-03-24. Vendor: Hcltech.

CVEs of Traveler

• CVE-2026-21783 - CVSS 4.3 (medium), 2026-03-24: HCL Traveler is affected by sensitive information disclosure.  The application generates some error messages that provide detailed information about errors…
• CVE-2025-0279 - CVSS 4.3 (medium), 2025-04-03: HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens,…
• CVE-2025-0278 - CVSS 4.3 (medium), 2025-04-03: HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error…
• CVE-2024-30134 - CVSS 7.5 (high), 2024-09-26: The HCL Traveler for Microsoft Outlook executable (HTMO.exe) is being flagged as potentially Malicious Software or an Unrecognized Application.
• CVE-2022-27561 - CVSS 7.5 (high), 2022-09-15: There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).
• CVE-2021-27778 - CVSS 4.9 (medium), 2022-06-01: HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler…
• CVE-2019-4409 - CVSS 5.4 (medium), 2019-10-18: HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a…