CVE-2025-37099

HPE Insight Remote Support (IRS) before v7.15.0.646 has a directory traversal flaw in the processAttachmentDataStream that enables remote code execution with SYSTEM privileges. Exploitation is possible remotely and without authentication. Remediation exists in IRS v7.15.0.646 or later.

CVE-2025-37099

A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...

CVE-2025-37099

A remote code execution vulnerability exists in HPE Insight Remote Support IRS prior to v7.15.0.646...

CVE-2025-37099

creationtimestamp| type| source ---|---|--- 2025-06-05 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-325/ 2025-06-05 21:59:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114633000374671229 2025-07-01 15:03:07+00:00| seen|...