← CVE Intelligence

CVE-2023-38551

Ivanti / Connect Secure PUBLISHED

Description (CNA)

A CRLF Injection vulnerability in Ivanti Connect Secure (9.x, 22.x) allows an authenticated high-privileged user to inject malicious code on a victim’s browser, thereby leading to cross-site scripting attack.

Affected (CNA)

Vendor / productVersions
Ivanti / Connect Secureaffected 22.7R2 before 22.7R2; affected 22.5R2.2 before 22.5R2.2; affected 9.1R18.6 before 9.1R18.6

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.