CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.3. It affects Ivanti. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-22023
Severity
MEDIUM
CVSS
5.3
EPSS
3.00%
Ivanti
Original NVD Description
An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS.
Related CVEs
Other vulnerabilities affecting the same vendor(s)