CVE-2024-53675

HIGH

HPE Insight Remote Support < 7.14.0.629 - XXE

Title source: rule

Description

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.

References (1)

Scores

CVSS v3 7.3
EPSS 0.2088
EPSS Percentile 95.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-611 CWE-91
Status published

Affected Products (1)

hpe/insight_remote_support < 7.14.0.629

Timeline

Published Nov 26, 2024
Tracked Since Feb 18, 2026