Vulnerability Details CVE-2024-22024
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.943
EPSS Ranking 99.9%
CVSS Severity
CVSS v3 Score 8.3
References
Products affected by CVE-2024-22024
-
cpe:2.3:a:ivanti:connect_secure:22.4
-
cpe:2.3:a:ivanti:connect_secure:22.5
-
cpe:2.3:a:ivanti:connect_secure:9.1
-
cpe:2.3:a:ivanti:policy_secure:22.5
-
cpe:2.3:a:ivanti:zero_trust_access:22.6