CVE-2023-28324
41Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 8.2epss 13%
from disclosure to weapon0 days
Published on NVDJun 30
metasploitJun 7
exploitation probability
13%top 4% of all CVEs
observed exploitation
nono source reports it
A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote code execution.
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
Ivanti · Ivanti Endpoint Manager