CVE-2024-28893

2024-05-0116:15:07

[email protected]

web.nvd.nist.gov

software

vulnerability

softpaq

configuration

arbitrary code execution

modified

extraction

updated

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

References

support.hp.com/us-en/document/ish_10502451-10502508-16/hpsbhf03931