CVE-2025-37099

HPE Insight Remote Support (IRS) before v7.15.0.646 has a directory traversal flaw in the processAttachmentDataStream that enables remote code execution with SYSTEM privileges. Exploitation is possible remotely and without authentication. Remediation exists in IRS v7.15.0.646 or later.

CVE-2024-53676

CVE-2024-53676 is a directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support that may allow remote code execution. Multiple connected sources (including Red Hat and PT-Security) corroborate a flaw in handling attachments/streams, related to a method akin to processAt...

CVE-2024-53674

CVE-2024-53674 relates to an XML External Entity (XXE) processing flaw in Hewlett Packard Enterprise Insight Remote Support. Documents indicate the vulnerability arises from improper XML parsing (getDocumentRootElement) which can allow remote attackers to disclose sensitive files. Notably, exploi...

CVE-2024-53673

The CVE-2024-53673 entry affects Hewlett Packard Enterprise Remote Insight Support (DESTA service). The ZDI advisory and related sources describe a deserialization vulnerability in DESTA that requires no authentication and can lead to remote code execution. The vulnerability arises from improper ...

CVE-2024-53675

CVE-2024-53675 concerns an XML External Entity (XXE) vulnerability in HPE Insight Remote Support . The connected documents consistently describe XXE as the underlying issue and indicate that remote users may disclose information in certain cases. Public details provided include the vulnerability ...

CVE-2023-30904

Technical details (affected product/versions, root cause, exploit information, or a fix) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2024-11622

CVE-2024-11622 is an XML External Entity (XXE) vulnerability in Hewlett Packard Enterprise Insight Remote Support. Several connected sources describe that improper XXE handling allows remote attackers to disclose information from affected installations. The issue affects HPE Insight Remote Suppor...

CVE-2025-37097

HPE Insight Remote Support (IRS) is affected in versions prior to 7.15.0.646, with an unauthenticated denial-of-service vulnerability. The CVE entry (CVE-2025-37097) is tied to IRS as the vulnerable product; the issue is described across NVD, Red Hat, CNNVD, CIRCL, and PT Security sources as a Do...

CVE-2025-37098

CVE-2025-37098 documents a path traversal vulnerability in HPE Insight Remote Support (IRS) , affecting versions prior to 7.15.0.646 . The vulnerability arises from improper handling of file paths, enabling an attacker to access restricted files via crafted input. Impact is described as high with...