1. Home
  2. CVE Database
  3. CVE-2021-27778
MEDIUM · 4.9

CVE-2021-27778

HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exp...

Vulnerability Description

HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exploit this vulnerability to execute a malicious script to access any cookies, session tokens, or other sensitive information retained by the browser and used with that site.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
HcltechTraveler<= 12.0.1.0

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2021-27778?

CVE-2021-27778 is a vulnerability with a CVSS score of 4.9 (MEDIUM). HCL Traveler is vulnerable to a cross-site scripting (XSS) caused by improper validation of the Name parameter for Approved Applications in the Traveler administration web pages. An attacker could exp...

How severe is CVE-2021-27778?

CVE-2021-27778 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-27778?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Traveler.