Is CVE-2023-37524 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2023-37524 being exploited in the wild.

How severe is CVE-2023-37524?

High severity, with a CVSS score of 7.7, published 27 June 2026.

Which products and versions are affected?

HCL Software Traveler for Microsoft Outlook < 3.0.6.

Is there a fix for CVE-2023-37524?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2023-37524 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2023-37524?

Check whether you run HCL Software Traveler for Microsoft Outlook at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-37524: HCL Traveler for Microsoft Outlook use of unmaintained .NET Framework 4.5

Q: Is there a fix for CVE-2023-37524?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2023-37524 attacked?

It is attacked with local access, in a network appliance.

Q: Am I affected by CVE-2023-37524?

Check whether you run HCL Software Traveler for Microsoft Outlook at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-37524 · Severity: high · CVSS 7.7 · Published 2026-06-27

HCL Traveler for Microsoft Outlook (HTMO) is vulnerable because it relies on an obsolete version of the Microsoft .NET Framework (version 4.5) that no longer receives security updates. This software is used to integrate HCL Domino mail and calendar services with the Microsoft Outlook client. Because the underlying framework is end-of-life, attackers could potentially exploit known, unpatched security flaws in the framework to compromise the user's workstation or access sensitive email data.

Technologies: HCL Software Traveler for Microsoft Outlook. Vendors: HCL Software.

Quick answers

Is CVE-2023-37524 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2023-37524 being exploited in the wild.
How severe is CVE-2023-37524?: High severity, with a CVSS score of 7.7, published 27 June 2026.
Which products and versions are affected?: HCL Software Traveler for Microsoft Outlook < 3.0.6.
Is there a fix for CVE-2023-37524?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2023-37524 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2023-37524?: Check whether you run HCL Software Traveler for Microsoft Outlook at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

HCL Traveler for Microsoft Outlook (HTMO) versions prior to 3.0.6 utilize Microsoft .NET Framework 4.5, which has reached end-of-life (EOL) and no longer receives security patches. This falls under CWE-1104 (Use of Unmaintained Third Party Components). The vulnerability is local in nature and requires user interaction, but it carries a high impact because the underlying framework's unpatched vulnerabilities could lead to full system compromise or data exfiltration. The issue is resolved in HTMO version 3.0.6, which migrates the application to a supported version of the .NET Framework.

Affected products

HCL Software Traveler for Microsoft Outlook (HTMO) < 3.0.6

Timeline

2026-06-27: advisory: NVD publication date

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131418

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.