High severity8.2NVD Advisory· Published May 31, 2024· Updated Apr 15, 2026

CVE-2023-38551

Description

A CRLF Injection vulnerability in Ivanti Connect Secure (9.x, 22.x) allows an authenticated high-privileged user to inject malicious code on a victim’s browser, thereby leading to cross-site scripting attack.

Affected products

Ivanti/Connect Securellm-fuzzy
Range: >=9, <10 or >=22, <23

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Security-Advisory-May-2024nvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000