Vulnerability Bulletins |
CVE-2024-22023 |
|
| Affected software | IVANTI |
| An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2024-22023 | |