1. Home
  2. CVE Database
  3. CVE-2025-0278
MEDIUM · 4.3

CVE-2025-0278

HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error messages, debug logs, or responses to user req...

Vulnerability Description

HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error messages, debug logs, or responses to user requests.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
HcltechTraveler<= 14.0.0.1

Related Weaknesses (CWE)

CWE-497

References

FAQ

What is CVE-2025-0278?

CVE-2025-0278 is a vulnerability with a CVSS score of 4.3 (MEDIUM). HCL Traveler is affected by an internal path disclosure in a Windows application when the application inadvertently reveals internal file paths, in error messages, debug logs, or responses to user req...

How severe is CVE-2025-0278?

CVE-2025-0278 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-0278?

Check the references section above for vendor advisories and patch information. Affected products include: Hcltech Traveler.