CVE-2024-22023: XEE

First published: Thu Apr 04 2024(Updated: )

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS.

Credit: support@hackerone.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/mitre-cve
• source/MITRE
• agent/references
• agent/description
• agent/type
• agent/first-publish-date
• agent/event
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/weakness
• agent/last-modified-date
• agent/author
• agent/softwarecombine
• agent/severity
• agent/tags
• vendor/ivanti
• canonical/ivanti connect secure
• version/ivanti connect secure/9.1-r1
• version/ivanti connect secure/9.1-r10
• version/ivanti connect secure/9.1-r11
• version/ivanti connect secure/9.1-r11.5
• version/ivanti connect secure/9.1-r12
• version/ivanti connect secure/9.1-r13
• version/ivanti connect secure/9.1-r14
• version/ivanti connect secure/9.1-r15
• version/ivanti connect secure/9.1-r16
• version/ivanti connect secure/9.1-r17
• version/ivanti connect secure/9.1-r18
• version/ivanti connect secure/9.1-r2
• version/ivanti connect secure/9.1-r3
• version/ivanti connect secure/9.1-r4
• version/ivanti connect secure/9.1-r4.1
• version/ivanti connect secure/9.1-r4.2
• version/ivanti connect secure/9.1-r4.3
• version/ivanti connect secure/9.1-r5
• version/ivanti connect secure/9.1-r6
• version/ivanti connect secure/9.1-r7
• version/ivanti connect secure/9.1-r8
• version/ivanti connect secure/9.1-r9
• version/ivanti connect secure/22.1
• version/ivanti connect secure/22.2
• version/ivanti connect secure/22.3
• version/ivanti connect secure/22.4
• version/ivanti connect secure/22.5
• version/ivanti connect secure/22.6
• canonical/ivanti policy secure
• version/ivanti policy secure/9.0
• version/ivanti policy secure/9.0-r1
• version/ivanti policy secure/9.0-r2
• version/ivanti policy secure/9.0-r2.1
• version/ivanti policy secure/9.0-r3
• version/ivanti policy secure/9.0-r3.1
• version/ivanti policy secure/9.0-r4
• version/ivanti policy secure/9.1
• version/ivanti policy secure/9.1-r1
• version/ivanti policy secure/9.1-r10
• version/ivanti policy secure/9.1-r11
• version/ivanti policy secure/9.1-r12
• version/ivanti policy secure/9.1-r13
• version/ivanti policy secure/9.1-r14
• version/ivanti policy secure/9.1-r15
• version/ivanti policy secure/9.1-r16
• version/ivanti policy secure/9.1-r17
• version/ivanti policy secure/9.1-r18
• version/ivanti policy secure/9.1-r2
• version/ivanti policy secure/9.1-r3
• version/ivanti policy secure/9.1-r4
• version/ivanti policy secure/9.1-r5
• version/ivanti policy secure/9.1-r6
• version/ivanti policy secure/9.1-r7
• version/ivanti policy secure/9.1-r8
• version/ivanti policy secure/9.1-r9
• version/ivanti policy secure/22.1
• version/ivanti policy secure/22.2
• version/ivanti policy secure/22.3
• version/ivanti policy secure/22.4
• version/ivanti policy secure/22.5
• version/ivanti policy secure/22.6