Filtered by vendor Hcltech Subscriptions
Filtered by product Traveler Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-27778 1 Hcltech 1 Traveler 2024-09-17 4.9 Medium
HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site.
CVE-2022-27561 1 Hcltech 1 Traveler 2024-09-16 7.5 High
There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf).
CVE-2019-4409 1 Hcltech 1 Traveler 2024-08-04 5.4 Medium
HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the entered file name. If the file name is not escaped in the returned error page, it could expose a cross-site scripting (XSS) vulnerability.