Veille CVE

Recherche « HCLSoftware Traveler »

5 CVE

  1. CVE-2026-56547 3.5 Faible

    HCLSoftware Traveler

    The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them.  The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects them back in the generated Apple profile.  The Apple profile is not usable without additional information and only allows the attacker to attack their own device, but HCL Traveler could at least check that the values submitted and reflected back in the Apple profile are found in the Domino directory entry for the already authenticated user.

  2. CVE-2026-21770 6.5 Moyenne

    HCLSoftware HCL Traveler for Microsoft Outlook (HTMO)

    HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application with malicious content.

  3. CVE-2025-59868 5.5 Moyenne

    HCLSoftware Traveler for Microsoft Outlook · Hcltech traveler for microsoft outlook

    HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the application.

  4. CVE-2023-37524 7.8 Élevée

    HCLSoftware Traveler for Microsoft Outlook · Hcltech traveler for microsoft outlook

    HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service.  Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerable third-party components.

  5. CVE-2024-23581 7.8 Élevée

    HCLSoftware Traveler for Microsoft Outlook · Hcltech traveler for microsoft outlook

    The HCL Traveler for Microsoft Outlook libraries are being flagged as potentially malicious software or an unrecognized application.