Search
Search Results (11 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2025-0278 | 1 Hcltech | 1 Traveler | 2025-10-10 | 4.3 Medium |
| HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error messages, debug logs, or responses to user requests. | ||||
| CVE-2025-0279 | 1 Hcltech | 1 Traveler | 2025-10-10 | 4.3 Medium |
| HCL Traveler generates some error messages that provide detailed information about errors and failures, such as internal paths, file names, sensitive tokens, credentials, error codes, or stack traces. Attackers could exploit this information to gain insights into the system's architecture and potentially launch targeted attacks. | ||||
| CVE-2023-37513 | 1 Hcltech | 1 Traveler To Do | 2024-11-21 | 3.3 Low |
| When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information. | ||||
| CVE-2023-37512 | 1 Hcltech | 1 Traveler Companion | 2024-11-21 | 3.3 Low |
| When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information. | ||||
| CVE-2023-37511 | 1 Hcltech | 1 Traveler To Do | 2024-11-21 | 3.5 Low |
| If certain App Transport Security (ATS) settings are set in a certain manner, insecure loading of web content can be achieved. | ||||
| CVE-2022-27561 | 1 Hcltech | 1 Traveler | 2024-11-21 | 7.5 High |
| There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf). | ||||
| CVE-2021-27778 | 1 Hcltech | 1 Traveler | 2024-11-21 | 4.9 Medium |
| HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site. | ||||
| CVE-2020-14264 | 1 Hcltech | 1 Traveler Companion | 2024-11-21 | 3.9 Low |
| "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK" | ||||
| CVE-2020-14263 | 1 Hcltech | 1 Traveler Companion | 2024-11-21 | 3.9 Low |
| "HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the included MobileIron AppConnect SDK" | ||||
| CVE-2019-4409 | 1 Hcltech | 1 Traveler | 2024-11-21 | 5.4 Medium |
| HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the entered file name. If the file name is not escaped in the returned error page, it could expose a cross-site scripting (XSS) vulnerability. | ||||
| CVE-2024-30134 | 1 Hcltech | 1 Traveler | 2024-09-30 | 6.7 Medium |
| The HCL Traveler for Microsoft Outlook executable (HTMO.exe) is being flagged as potentially Malicious Software or an Unrecognized Application. | ||||
Page 1 of 1.