HCL Traveler for Microsoft Outlook (HTMO) can be compromised because it depends on the .NET Framework 4.5, which is no longer supported and does not receive security updates. The lack of patch coverage permits known third‑party weaknesses to affect the application, creating a risk to confidentiality, integrity, and availability. The identified weakness is CWE‑1104, and the CVSS score of 7.7 classifies it as a high‑severity issue requiring attention.

The affected product is HCLSoftware Traveler for Microsoft Outlook. No specific build or minor version was listed, so any installation that relies on .NET Framework 4.5 could be impacted.

The CVSS value of 7.7 indicates substantial risk, while the EPSS score is unavailable and the vulnerability is not listed in CISA’s KEV catalog. Attack vectors likely involve interaction with the HTMO component in environments where the legacy .NET framework is present; exploitation would probably occur through the application’s use of vulnerable third‑party components, potentially leading to unauthorized data access or program behavior changes.