<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: ivanti-ips</title><description>Every new CVE for ivanti-ips.</description><link>https://agentprime.io/</link><item><title>CVE-2024-22024: XML external entity injection in Ivanti ICS and others</title><link>https://agentprime.io/advisories/CVE-2024-22024/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-22024/</guid><description>CVSS 8.3 (High). Critical: CVSS score 8.3 (7.0 or more) and EPSS 0.95 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Feb 2024 04:07:04 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-21893: Server-side request forgery in Ivanti ICS and others</title><link>https://agentprime.io/advisories/CVE-2024-21893/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21893/</guid><description>CVSS 8.2 (High). Critical: In CISA’s KEV catalogue since 31 Jan 2024: it is known to be exploited. CVSS score 8.2 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 31 Jan 2024 17:51:35 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-21888: Improper privilege management in Ivanti ICS and others</title><link>https://agentprime.io/advisories/CVE-2024-21888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21888/</guid><description>CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.85 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 31 Jan 2024 17:51:34 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-21887: Command injection in Ivanti ICS and others</title><link>https://agentprime.io/advisories/CVE-2024-21887/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-21887/</guid><description>CVSS 9.1 (Critical). Critical: In CISA’s KEV catalogue since 10 Jan 2024: it is known to be exploited. CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jan 2024 17:02:16 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2023-46805: Ivanti ICS: An authentication bypass vulnerability in the web component of Ivanti ICS 9.x…</title><link>https://agentprime.io/advisories/CVE-2023-46805/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-46805/</guid><description>CVSS 8.2 (High). Critical: In CISA’s KEV catalogue since 10 Jan 2024: it is known to be exploited. CVSS score 8.2 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 12 Jan 2024 17:02:16 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item></channel></rss>