Hcltech Traveler For Microsoft Outlook vulnerabilities

8 CVEs affecting Hcltech Traveler For Microsoft Outlook, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-59868, published 2026-06-27.

More from Hcltech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-37524, published 2026-06-27. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service.  Since .NET Framework 4.5 has reached end-of-life and no longer receives…
• CVE-2024-42191, published 2025-05-30. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content.
• CVE-2024-42190, published 2025-05-30. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content.
• CVE-2024-30133, published 2024-11-12. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which…
• CVE-2024-30134, published 2024-09-26. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. The HCL Traveler for Microsoft Outlook executable (HTMO.exe) is being flagged as potentially Malicious Software or an Unrecognized Application.
• CVE-2024-42192, published 2025-10-16. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a credential leakage which could allow an attacker to access other computers or applications.
• CVE-2025-59868, published 2026-06-27. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks…
• CVE-2024-23581, published 2026-06-26. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially malicious software or an unrecognized application.