CVE-2024-11633

CVSS 3.1: 7.2 high
EPSS: 2%p76
Published: Dec 10, 2024 · Dec 10, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-11633 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution

Vendors: ivanti

Products: connect secure

Weakness: CWE-88

Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news

1 story

Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities

The Hacker NewsDec 11, 09:03 UTC · Dec 11, 2024VulnerabilityExploitedCVE-2024-11639 CVE-2024-11772 CVE-2024-11773+31