CVE-2024-11622CWE-91

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases

High · published November 26, 2024

CVSS v3.1
7.3
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01515 · 74.3th percentile
Weakness
CWE-91 · XML Injection (aka Blind XPath Injection)
Published
2024-11-26T21:31Z
EPSS history
Timeline
  • 26 NOV 21:31Z
    An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases
    cvelistv5