VYPR
← All advisories
High severity7.7NVD Advisory· Published May 1, 2024· Updated Jun 17, 2026

CVE-2024-28893

CVE-2024-28893

Description

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

Affected products

3
  • Microfocus/SoftPaqs2 versions
    cpe:2.3:a:hp:softpaqs:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:hp:softpaqs:-:*:*:*:*:*:*:*
    • (no CPE)
  • HP Inc./HP software packages (SoftPaqs)v5
    Range: See HP Security Bulletin reference for affected versions.

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.