CVE-2024-23581
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
HCL Traveler for Microsoft Outlook libraries are being falsely flagged as potentially malicious software or an unrecognized application. This may prevent installation or execution of the software by security systems.
Risk Assessment
The risk is that users may be unable to install or run HCL Traveler, disrupting email access and collaboration. False positives can also reduce trust in security tools.
Recommendation
It is recommended to add HCL Traveler libraries to the trusted applications list in antivirus and threat detection systems. Also, contact HCL for updated, properly signed versions.
Other vulnerabilities in HCL Traveler
See all- CVE-2026-56547Low
The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded. The values cannot be changed later, and the generation page reflects them back. The profile is not usable without additional info and only allows the attacker to attack their own device, but HCL Traveler could at least check that the values are found in the Domino directory entry for the authenticated user.
- CVE-2024-42192Medium
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to credential leakage, which could allow an attacker to access other computers or applications.
Original NVD description (English source)
The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially malicious software or an unrecognized application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS