exploit/linux/http/ivanti_connect_secure_rce_cve_2024_21893
waffenfähigIvanti Connect Secure Unauthenticated Remote Code Execution
01
ausgenutzte CVEs (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-21893US | high8.2OT kritisch | KEV | ||
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an att… | ||||
| CVE-2024-21887US | critical9.1OT kritisch | KEV | ||
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send special… | ||||
| CVE-2023-36661US | high7.5 | Exploit | ||
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Servi… | ||||
scry
Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan