What is the CVSS score of CVE-2025-37097?

CVE-2025-37097 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of Insight Remote Support are affected by CVE-2025-37097?

CVE-2025-37097 presents notable security risk rated CVSS 7.5. Exploitation could compromise the security of affected deployments.

Is there a public PoC exploit available for CVE-2025-37097?

Yes, a public proof-of-concept exploit is available for CVE-2025-37097. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2025-37097?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Insight Remote Support CVE-2025-37097

EUVD-2025-19614 HIGH

Exposed Dangerous Method or Function (CWE-749)

2025-07-01 security-alert@hpe.com

Denial Of Service Insight Remote Support

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 01:42 euvd

EUVD-2025-19614

Analysis Generated

Mar 16, 2026 - 01:42 vuln.today

PoC Detected

Jul 10, 2025 - 15:37 vuln.today

Public exploit code

CVE Published

Jul 01, 2025 - 14:15 nvd

HIGH 7.5

DescriptionCVE.org

A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service

Analysis

A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users.

RemediationAI

Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.

More in Insight Remote Support

View all

CVE-2024-53676 CRITICAL Act Now POC

9.8 Nov 27

A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution

CVE-2025-37099 CRITICAL Act Now

9.8 Jul 01

A remote code execution vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.

CVE-2024-53673 CRITICAL Act Now

9.8 Nov 26

A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code

CVE-2025-37098 HIGH This Week

7.5 Jul 01

A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.

CVE-2024-53675 HIGH This Week

7.5 Nov 26

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose in

CVE-2024-53674 HIGH This Week

7.5 Nov 26

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose in

CVE-2024-11622 HIGH This Week

7.5 Nov 26

An XML external entity injection (XXE) vulnerability in HPE Insight Remote Support may allow remote users to disclose in

CVE-2023-30904 MEDIUM This Month

5.5 Jun 16

A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information

Same weakness CWE-749 – Exposed Dangerous Method or Function

View all

CVE-2018-19322 HIGH POC

7.8

CVE-2025-26651 MEDIUM

6.5

CVE-2025-59403 CRITICAL POC

9.8

CVE-2026-30957 CRITICAL POC

9.9

CVE-2026-30921 CRITICAL POC

9.9

CVE-2022-4136 CRITICAL POC

9.8

CVE-2016-9469 HIGH POC

8.2

CVE-2023-26478 HIGH POC

8.1

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

CVE-2025-37097 vulnerability details – vuln.today

Back

Insight Remote Support CVE-2025-37097

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

More in Insight Remote Support

Same weakness CWE-749 – Exposed Dangerous Method or Function

Same technique Denial Of Service

Share

External POC / Exploit Code