HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability
Priority LOW 24CWE-670Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00256 17th percentileScored 2026-11-07
Fix Fixed HCL Traveler for Microsoft Outlook (HTMO) (HCL Software): 3.0.11
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| HCL Software | HCL Traveler for Microsoft Outlook (HTMO) | before 3.0.11 | 3.0.11 | Patch available | CNA |
- HCL Traveler for Microsoft Outlook (HTMO) VendorHCL Software Affected before 3.0.11 Fixed in 3.0.11 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hcltech:traveler_for_microsoft_outlook:*:*:*:*:*:*:*:* | before 3.0.11 | Vulnerable | HCL Software |
- cpe:2.3:a:hcltech:traveler_for_microsoft_outlook:*:*:*:*:*:*:*:* Versions before 3.0.11 Vulnerable ·HCL Software
Remediation
- Fix · CNA HCL Traveler for Microsoft Outlook (HTMO) (HCL Software) Fixed in 3.0.11
Timeline
- 2026-10-02 Threatist record created from CVE-2024-30133
- 2026-10-03 Alias added: GHSA-x6qj-75g5-46wg
References
More HCL Software Traveler For Microsoft Outlook vulnerabilities
- TI-2024-28194 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking CVSS 3.1CRITICAL 9.8
- TI-2024-28193 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking CVSS 3.1CRITICAL 9.8
- TI-2023-19123 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET… CVSS 3.1HIGH 7.8
- TI-2024-15610 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability CVSS 3.1HIGH 7.8
- TI-2024-19891 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability CVSS 3.1HIGH 7.5
- TI-2025-37291 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to sensitive data exposure CVSS 3.1MEDIUM 5.5
Sources
- CVE-2024-30133 · CVE Program
- CVE-2024-30133 · NVD
- FIRST EPSS
- GHSA-x6qj-75g5-46wg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences