A CRLF Injection vulnerability in Ivanti Connect Secure (9.x, 22.x) allows an authenticated high-privileged user to inject malicious code on a victim’s browser, thereby leading to cross-site scripting attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Pulse Secure Pulse Connect Secure | — | Update Ivanti Connect Secure to version 22.0R0Update Ivanti Connect Secure to version 9.0R0 | Jun 10, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub