CVE-2024-21888
65Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Actcvss 8.8epss 87%
from disclosure to weapon
Published on NVDJan 31
VulnCheck+29d
exploitation probability
87%top 1% of all CVEs
observed exploitation
yesVulnCheck
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H