[security bulletin] HPSBMU03685 rev.1 - HPE Insight Control server provisioning (ICsp), Multiple Remote Vulnerabilities
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