HTTP: HPE Insight Remote Support getDocumentRootElement XML External Entity Injection

This signature detects attempts to exploit a known vulnerability against HPE Insight. A successful attack can lead to sensitive information disclosure.

Extended Description

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose information in certain cases.

Affected Products

Hpe insight_remote_support

Short Name
HTTP:CTS:HPE-GETDOCUMENT-XML
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2024-11622 CVE-2024-53674 CVE-2024-53675 Entity External HPE Injection Insight Remote Support XML getDocumentRootElement
Release Date
03/04/2025
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3794
False Positive
Unknown
Vendors

Hpe

Found a potential security threat?