{"id":"CVE-2024-53675","published":"2024-11-26T22:01:12Z","modified":"2024-11-27T11:58:39Z","title":"An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose…","vendor":"Hewlett Packard Enterprise (HPE)","product":"HPE Insight Remote Support","tier":"core","eol":null,"affectedVersions":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"HPE Insight Remote Support","versions":["< 7.14.0.629"]}],"description":{"text":"An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.","provenance":"source","from":"CVE.org"},"summary":{"text":"An XML external entity injection (XXE) flaw in HPE Insight Remote Support, a product from Hewlett Packard Enterprise, can be used to disclose information. An attacker can exploit it remotely over the network without authentication or user interaction, though the conditions under which information is disclosed are limited to certain cases.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:17:40Z"},"cvss":{"score":7.3,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.81015,"percentile":0.9963,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-91","name":"XML Injection"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04731en_us","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-52023","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-52023","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-11-26","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-53675","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":25.0,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.93,"detail":"percentile 0.9963"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.11,"detail":"base score 7.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}