What’s Vulnerable › Products

HCL Software HCL Traveler vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your HCL Software HCL Traveler version is affected

Latest HCL Software HCL Traveler vulnerabilities

• CVE-2026-56547 — An input reflection vulnerability affects HCL Traveler (CVSS 3.5)
• CVE-2026-21790 — HCL Traveler is susceptible to a weak default HTTP header validation vulnerability (CVSS 6.3)
• CVE-2026-21783 — HCL Traveler is affected by sensitive information disclosure (CVSS 4.3)
• CVE-2025-0279 — HCL Traveler is affected by generation of error messages containing sensitive information (CVSS 4.3)
• CVE-2025-0278 — An internal path disclosure vulnerability affects HCL Traveler (CVSS 4.3)
• CVE-2022-27561 — HCL Traveler is susceptible to a Reflected Cross-Site Scripting vulnerability in the web admin (LotusTraveler.nsf) (CVSS 4.8)
• CVE-2021-27778 — HCL Traveler is susceptible to a cross-site scripting vulnerability which could allow an attacker to execute a malicious script to access sensitive information. (CVSS 4.8)
• CVE-2019-4409 — (CVSS 5.4)