Hewlett Packard Enterprise (HPE)
Records928All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical166CVSS 9.0–10.0
CVSS high474CVSS 7.0–8.9
Exploited now
Hewlett Packard Enterprise (HPE) records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.56287 · Published 2024-11-27 · Fixed in 7.14.0.629 CWE-552
Priority HIGH 79
An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.81015 · Published 2024-11-26 · Fixed in 7.14.0.629 CWE-91
Priority HIGH 72
A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00537 · Published 2025-07-01 · Fixed in v7.15.0.646 CWE-749
Priority HIGH 69
A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.46337 · Published 2025-07-01 · Fixed in v7.15.0.646 CWE-22
Priority HIGH 69
An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.46671 · Published 2024-11-26 · Fixed in 7.14.0.629 CWE-91
Priority MEDIUM 50
A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00761 · Published 2025-07-01 · Fixed in v7.15.0.646 CWE-94
Priority MEDIUM 44
A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00718 · Published 2024-11-26 · Fixed in 7.14.0.629 CWE-502
Priority MEDIUM 42
An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01515 · Published 2024-11-26 · Fixed in 7.14.0.629 CWE-91
Priority LOW 24
A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00158 · Published 2023-06-16 · No fix listed CWE-798
THREATIST.IORead the docs