Database/Control plane, storage & DevOps

HPE Insight Remote Support (XXE): XML external entity injection allowing remote users to disclose information

CVE-2024-53674Control plane, storage & DevOpscurated

Impact

XML external entity injection allowing remote users to disclose information from the IRS server.

Who can reach it

Unauthenticated network access.

What to do

Patch per HPESBGN04731.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04731en_us&docLocale=en_US

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.