NetBackup vulnerability reported in \Windows\Installer\\$PatchCache$ subdirectories

Problem

NetBackup vulnerabilities are being reported in \Windows\Installer\\$PatchCache$ subdirectories, often from previously installed versions that NetBackup has been upgraded from.

Error Message

Example from a scan, but any version or component may be specified:

  Path: C:\Windows\Installer\$PatchCache$\Managed\1F05B61F500ADCD429C44F9AD0C20FB9\8.1.1\libcurl.dll
  Installed version : 7.46.0.0
  Fixed version     : 8.9.1

  Path: C:\Windows\Installer\$PatchCache$\Managed\58042DDF03C614A4B8F8887AE364C7F6\10.3.0\libcurl.dll
  Installed version : 7.82.0.0
  Fixed version     : 8.9.1

  Path: C:\Windows\Installer\$PatchCache$\Managed\F8E835B18F6A89646A26117B9936D4FB\9.1.0\libcurl.dll
  Installed version : 7.72.0.0
  Fixed version     : 8.9.1

Path: C:\Windows\Installer\$PatchCache$\Managed\AA0B24B7A9BC8F34E9F427D38ACB7A13\8.2.0\java.exe
Installed version: 1.8.0_211
Fixed version: 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2

Path: C:\Windows\Installer\$PatchCache$\Managed\4306B58898799334FB427C6D2F073075\8.0.0\java.exe
Installed version: 1.8.0_101
Fixed version: 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2

Path: C:\Windows\Installer\$PatchCache$\Managed\24D35E1D1C14D2C48BFBE5338C46DD30\8.1.1\java.exe
Installed version: 1.8.0_151
Fixed version: 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2

Path: C:\Windows\Installer\$PatchCache$\Managed\8FEF8894EB7AFF74AA055973A60FFD76\7.7.3\java.exe
Installed version: 1.8.0_31
Fixed version: 1.7.0_331 / 1.8.0_321 / 1.11.0_14 / 1.17.0_2

Cause

The path: \Windows\Installer\\$PatchCache$\\ is a directory managed by the Microsoft Windows Installer service, and the components from older versions of NetBackup are not removed from the Windows host when NetBackup is upgraded.

Solution

It will not impact NetBackup to remove the files associated with the older versions of the program from \Windows\Installer\\$PatchCache$\\.