Vulnerabilities

TI-2024-35875 CVE-2024-53675 · GHSA-56g4-wf8m-979x

XML injection in Hewlett Packard Enterprise (HPE) HPE Insight Remote Support

HIGH 79

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.81015 Published 2024-11-26 Fixed in 7.14.0.629 CWE-91

TI-2024-35874 CVE-2024-53674 · GHSA-f8v8-jqrr-5mhq

HIGH 69

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.46671 Published 2024-11-26 Fixed in 7.14.0.629 CWE-91

TI-2024-10769 CVE-2024-11622 · GHSA-536h-wxcg-vp88

MEDIUM 42

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01515 Published 2024-11-26 Fixed in 7.14.0.629 CWE-91