CVE-2023-37524 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service.

What is CVE-2023-37524?

CVE-2023-37524 is a high-severity vulnerability in HCLSoftware Traveler for Microsoft Outlook, published on 27 Jun 2026.

Official description

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service.  Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerable third-party components.

Weakness: CWE-1104

Which versions are affected by CVE-2023-37524?

It affects 1 product.

Products include Hcltech Traveler for Microsoft Outlook.

How do I fix CVE-2023-37524?

No fix has been published for CVE-2023-37524 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-37524 being exploited?

There is no known exploitation of CVE-2023-37524 in the wild and no public exploit code.

Other vulnerabilities in HCLSoftware Traveler for Microsoft Outlook

• CVE-2024-23581 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability Medium 6.7
• CVE-2024-30134 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability Medium 6.7
• CVE-2024-42190 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking Medium 6.5
• CVE-2024-42191 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking Medium 6.5
• CVE-2025-59868 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to sensitive data exposure Medium 5.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vp5c-23j8-3fh2.