CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.3. It affects Ivanti. Its EPSS score suggests a 94.7% probability of exploitation in the next 30 days.
CVE
CVE-2024-22024
Severity
HIGH
CVSS
8.3
EPSS
94.72%
Ivanti
Original NVD Description
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.
Related CVEs
Other vulnerabilities affecting the same vendor(s)