CVE-2024-21893

No fix known ExploitedEPSS 100%CVSS 8.2

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

Published 2024-01-31 · In CISA KEV since 2024-01-31 · CVE record · OSV

Products: Ivanti ICS, Ivanti IPS, ivanti connect_secure, ivanti policy_secure