CVE-2019-6328

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6329.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jun 25, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-63297.8HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files.CVE-2019-63309.8A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerabilityCVE-2019-63313.3An issue was found in Samsung Mobile Print (Android) versions prior to 4.08.007. A potential security vulnerability caused by incomplete obfCVE-2019-63324.8A potential security vulnerability has been identified with certain HP InkJet printers. The vulnerability could be exploited to allow cross-CVE-2019-63336.7A potential security vulnerability has been identified with certain versions of HP Touchpoint Analytics prior to version 4.1.4.2827. This vuCVE-2019-63349.8HP LaserJet, PageWide, OfficeJet Enterprise, and LaserJet Managed Printers have a solution to check application signature that may allow potCVE-2019-63357.5A potential security vulnerability has been identified with Samsung Laser Printers. This vulnerability could potentially be exploited to creCVE-2019-63375.2For the printers listed a maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances, the CVE-2019-63388.0In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; Drupal core uses the third-party PEAR Archive_Tar CVE-2019-63399.8In Drupal Core versions 7.x prior to 7.62, 8.6.x prior to 8.6.6 and 8.5.x prior to 8.5.9; A remote code execution vulnerability exists in PHCVE-2019-63408.1Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can CVE-2019-63415.4In Drupal 7 versions prior to 7.65; Drupal 8.6 versions prior to 8.6.13;Drupal 8.5 versions prior to 8.5.14. Under certain circumstances the