CVE-2023-37524: Hcltech Traveler For Microsoft Outlook

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service.  Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerable third-party components.

Affected products

• Hcltech Traveler For Microsoft Outlook: before 3.0.6 (fixed in 3.0.6)

Published 2026-06-27. Last modified 2026-07-06.