Support Assistant
by Microfocus
CVEs (19)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-2245 | Cri | 0.64 | 9.8 | 0.06 | Mar 19, 2016 | HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors. | ||
| CVE-2025-10578 | Hig | 0.51 | 7.8 | 0.00 | Oct 1, 2025 | A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write. | ||
| CVE-2025-43019 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion. | ||
| CVE-2025-43026 | Hig | 0.51 | 7.8 | 0.00 | Jun 5, 2025 | A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write. | ||
| CVE-2022-23455 | Hig | 0.51 | 7.8 | 0.00 | Feb 1, 2023 | Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files. | ||
| CVE-2022-23454 | Hig | 0.51 | 7.8 | 0.00 | Feb 1, 2023 | Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files. | ||
| CVE-2022-23453 | Hig | 0.51 | 7.8 | 0.00 | Feb 1, 2023 | Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files. | ||
| CVE-2022-38395 | Hig | 0.51 | 7.8 | 0.03 | Dec 12, 2022 | HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance… | ||
| CVE-2020-6922 | Hig | 0.51 | 7.8 | 0.01 | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. | ||
| CVE-2020-6921 | Hig | 0.51 | 7.8 | 0.01 | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. | ||
| CVE-2020-6919 | Hig | 0.51 | 7.8 | 0.01 | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. | ||
| CVE-2020-6918 | Hig | 0.51 | 7.8 | 0.01 | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. | ||
| CVE-2020-6917 | Hig | 0.51 | 7.8 | 0.01 | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. | ||
| CVE-2019-6329 | Hig | 0.51 | 7.8 | 0.02 | Jun 25, 2019 | HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328. | ||
| CVE-2019-6328 | Hig | 0.51 | 7.8 | 0.01 | Jun 25, 2019 | HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329. | ||
| CVE-2018-5927 | Hig | 0.47 | 7.3 | 0.00 | Mar 27, 2019 | HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code. | ||
| CVE-2020-6920 | Med | 0.36 | 5.5 | 0.01 | Feb 16, 2022 | Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software. | ||
| CVE-2022-23456 | Med | 0.36 | 5.5 | 0.00 | Jan 28, 2022 | Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software. | ||
| CVE-2017-2744 | Med | 0.36 | 5.5 | 0.00 | Jan 23, 2018 | The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1. |
- risk 0.64cvss 9.8epss 0.06
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors.
- risk 0.51cvss 7.8epss 0.00
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.47.41.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
- risk 0.51cvss 7.8epss 0.00
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion.
- risk 0.51cvss 7.8epss 0.00
A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write.
- risk 0.51cvss 7.8epss 0.00
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
- risk 0.51cvss 7.8epss 0.00
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
- risk 0.51cvss 7.8epss 0.00
Potential security vulnerabilities have been identified in HP Support Assistant. These vulnerabilities include privilege escalation, compromise of integrity, allowed communication with untrusted clients, and unauthorized modification of files.
- risk 0.51cvss 7.8epss 0.03
HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit the DLL hijacking vulnerability and elevate privileges when Fusion launches the HP Performance…
- risk 0.51cvss 7.8epss 0.01
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
- risk 0.51cvss 7.8epss 0.01
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
- risk 0.51cvss 7.8epss 0.01
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
- risk 0.51cvss 7.8epss 0.01
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
- risk 0.51cvss 7.8epss 0.01
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
- risk 0.51cvss 7.8epss 0.02
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328.
- risk 0.51cvss 7.8epss 0.01
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329.
- risk 0.47cvss 7.3epss 0.00
HP Support Assistant before 8.7.50.3 allows an unauthorized person with local access to load arbitrary code.
- risk 0.36cvss 5.5epss 0.01
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software.
- risk 0.36cvss 5.5epss 0.00
Potential arbitrary file deletion vulnerability has been identified in HP Support Assistant software.
- risk 0.36cvss 5.5epss 0.00
The vulnerability allows attacker to extract binaries into protected file system locations in HP Support Assistant before 12.7.26.1.