HCL Software HCL Traveler

• CVE-2025-0278 Medium 4.3 An internal path disclosure vulnerability affects HCL Traveler 0.3%
• CVE-2025-0279 Medium 4.3 HCL Traveler is affected by generation of error messages containing sensitive information 0.3%
• CVE-2022-27561 High 7.5 HCL Traveler is susceptible to a Reflected Cross-Site Scripting vulnerability in the web admin (LotusTraveler.nsf) 0.5%
• CVE-2021-27778 Medium 4.9 HCL Traveler is susceptible to a cross-site scripting vulnerability which could allow an attacker to execute a malicious script to access sensitive information. 0.4%