Hpe Insight Remote Support — known CVE vulnerabilities

Every CVE whose affected-product data names Hpe Insight Remote Support, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2024-53676 — CVSS 9.8 (critical): A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution.
• CVE-2025-37099 — CVSS 9.8 (critical): A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.
• CVE-2024-53673 — CVSS 8.1 (high): A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code.
• CVE-2025-37097 — CVSS 7.5 (high): A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service
• CVE-2025-37098 — CVSS 7.5 (high): A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.
• CVE-2024-53675 — CVSS 7.3 (high): An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in…
• CVE-2024-11622 — CVSS 7.3 (high): An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in…
• CVE-2024-53674 — CVSS 7.3 (high): An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in…
• CVE-2023-30904 — CVSS 5.5 (medium): A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information.