CVE-2024-28893

7.7 highEPSS 0.3%

High (7.7) in hp softpaqs. EPSS 0.3% chance of exploitation in the next 30 days.

Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configuration file has been modified after extraction. HP has released updated software packages (SoftPaqs).

Severity

CVSS 3.1

7.7 high

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hp:softpaqs

References

https://support.hp.com/us-en/document/ish_10502451-10502508-16/hpsbhf03931
https://support.hp.com/us-en/document/ish_10502451-10502508-16/hpsbhf03931

Check your stack JSON