CVE-2011-0923: HP Data Protector

High severity, CVSS 10.0. EPSS: 81.1% chance of exploitation in the next 30 days.

The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."

Affected products

• HP Data Protector: any version

Published 2011-02-09. Last modified 2026-06-16.