CVE-2024-22024

An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.

Affected

Ivanti · Ivant · ICS · IPS

CVSS v3.1 NVD

8.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

CVSS v3.0 HACKERONE

8.3 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

EPSS

94.72% chance of exploitation in the next 30 days, 100th percentile

Nuclei

high

Published

2024-02-13

Updated

2025-05-09

Proof-of-concept exploits (2)

• 0dteam/CVE-2024-2202431★ · 2024-02-09
• tequilasunsh1ne/ivanti_CVE_2024_220240★ · 2024-10-08

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22024.yaml

Exploit collections (1)

• CVE-2024-22024.yamlzan8in/afrog

Security advisories

• https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivan…

References

• CVE Record
• NVD entry

Related

• CVE-2023-7309
• CVE-2024-27292
• CVE-2024-39943
• CVE-2024-4879
• CVE-2024-51228