CVE-2019-4409

HCL Traveler versions 9.x and earlier are susceptible to cross-site scripting attacks. On the Problem Report page of the Traveler servlet pages, there is a field to specify a file attachment to provide additional problem details. An invalid file name returns an error message that includes the entered file name. If the file name is not escaped in the returned error page, it could expose a cross-site scripting (XSS) vulnerability.

• CWE-79

• https://hclpnpsupport.hcltech.com/csm?id=kb_article&sysparm_article=KB0073231Mitigation, Patch, Vendor Advisory
• https://hclpnpsupport.hcltech.com/csm?id=kb_article&sysparm_article=KB0073231Mitigation, Patch, Vendor Advisory

Published

Oct 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-4398IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise…3.3
• CVE-2019-4399IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2…7.5
• CVE-2019-4400IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2…4.3
• CVE-2019-4402IBM API Connect 2018.1 through 2018.4.1.6 developer portal c…7.5
• CVE-2019-4403IBM Connections 6.0 is vulnerable to cross-site scripting. T…5.4
• CVE-2019-4406IBM Spectrum Protect Backup-Archive Client 7.1 and 8.1 may b…4.4
• CVE-2019-4410IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.…5.4
• CVE-2019-4411IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 cou…4.3
• CVE-2019-4412IBM Cognos Controller stores sensitive information in URL pa…5.3
• CVE-2019-4415IBM Cloud Private 3.1.1 and 3.1.2 could allow a local user t…7.8
• CVE-2019-4419IBM Intelligent Operations Center V5.1.0 through V5.2.0 is v…8.2
• CVE-2019-4420IBM Intelligent Operations Center V5.1.0 through V5.2.0 coul…6.2