CVE-2024-11004 – Ivanti Connect Secure/Policy Secure Cross-Site Scripting

CVE ID : CVE-2024-11004

Published : Nov. 12, 2024, 5:15 p.m. | 1 hour, 1 minute ago

Description : Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required.

Severity: 8.4 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2024-11004 – Ivanti Connect Secure/Policy Secure Cross-Site Scripting