CVE-2024-22023

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS...

CVE-2024-22023

creationtimestamp| type| source ---|---|--- 2024-04-04 11:29:08+00:00| seen| https://t.me/truesecator/5600 2024-04-05 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1264 2025-05-12 06:22:54+00:00| seen|...

Ivanti Rushes Patches for 4 New Flaws in Connect Secure and Policy Secure

Ivanti has released security updates to address four security flaws impacting Connect Secure and Policy Secure Gateways that could result in code execution and denial-of-service DoS. The list of flaws is as follows - CVE-2024-21894 CVSS score: 8.2 - A heap overflow vulnerability in the IPSec...