Security Advisory

CVE-2024-22024

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-02-13 04:07:04

Last updated 2025-05-09 18:26:09

Assigner hackerone

CVSS score 8.3

State PUBLISHED

Description

An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.

← Browse all CVEs View on cve.org ↗