Lucene search
MitreCVELIST:CVE-2023-38343HistorySep 21, 2023 - 12:00 a.m.
CVE-2023-38343
2023-09-2100:00:00
mitre
www.cve.org
6
cve-2023-38343
xml external entity injection
csep component
file disclosure
server side request forgery
ivanti endpoint manager
EPSS
0.001
Percentile
49.1%
An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022 SU4. External entity references are enabled in the XML parser configuration. Exploitation of this vulnerability can lead to file disclosure or Server Side Request Forgery.
Related
prion
prion
Xxe
2023-09-21 21:15:00
nvd
nvd
CVE-2023-38343
2023-09-21 21:15:09
cve
cve
CVE-2023-38343
2023-09-21 21:15:09
vulnrichment
vulnrichment
CVE-2023-38343
2023-09-21 00:00:00