Medium severity6.1NVD Advisory· Published Feb 1, 2022· Updated Jun 17, 2026
CVE-2021-38560
CVE-2021-38560
Description
Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:ivanti:service_manager:2021.1:*:*:*:*:*:*:*
- Ivanti/Service Managerdescription
- Range: 2021.1
Patches
Vulnerability mechanics
References
1- forums.ivanti.com/s/article/Ivanti-Service-Manager-Asset-Manager-2021-1-Release-NotesnvdPermissions RequiredVendor Advisory
News mentions
0No linked articles in our index yet.