Known Vulnerabilities for Traveler by Hcltech
Listed below are 4 of the newest known vulnerabilities associated with "Traveler" by "Hcltech".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-93947 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Traveler tra... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-56547 json | The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requi... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-21783 json | Not Provided | 2026-03-24 | 2026-03-31 | |
| CVE-2025-49300 json | Insertion of Sensitive Information Into Sent Data vulnerability in Shinetheme Traveler Option Tree custom-option-tree allows ... | Not Provided | 2025-12-16 | 2026-10-20 |
| CVE-2022-27561 json | There is a reflected Cross-Site Scripting vulnerability in the HCL Traveler web admin (LotusTraveler.nsf). | 4.8 - MEDIUM | 2022-09-15 | 2022-09-19 |
| CVE-2021-27778 json | HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved A... | 4.8 - MEDIUM | 2022-06-01 | 2022-06-08 |
| CVE-2019-4409 json | HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Trav... | 5.4 - MEDIUM | 2019-10-18 | 2019-10-30 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hcltech | Traveler | 10.0.0.0 |