Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-21888

No fix known EPSS 85%CVSS 8.8

A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.

Published 2024-01-31 · CVE record · OSV

Products: Ivanti ICS, Ivanti IPS, ivanti connect_secure, ivanti policy_secure