onyx

onyx --cves cve-2023-41719

CVE-2023-41719

HIGHPulse Secure
score
<0.1
cvss
7.2
epss
3.4%
published
2023-12-14
kev added
—
first seen

Ivanti Connect Secure < 22.6R2 contains a remote code execution caused by impersonation of an administrator in crafted web requests, letting attackers execute arbitrary code remotely, exploit requires attacker to impersonate an administrator.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2023-12-14 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 3.4%2026-09-23: epss 3.4%2026-09-24: epss 3.4%2026-09-25: epss 3.4%2026-09-26: epss 3.4%2026-09-27: epss 3.4%2026-09-28: epss 3.4%2026-09-29: epss 3.4%2026-09-30: epss 3.4%2026-10-01: epss 3.4%2026-10-02: epss 3.4%2026-10-03: epss 3.4%2026-10-04: epss 3.4%2026-10-05: epss 3.4%2026-10-06: epss 3.4%2026-10-07: epss 3.4%2026-10-08: epss 3.4%2026-10-09: epss 3.4%2026-10-10: epss 3.4%2026-10-11: epss 3.4%2026-10-12: epss 3.4%2026-10-13: epss 3.4%2026-10-14: epss 3.4%2026-10-15: epss 3.4%2026-10-16: epss 3.4%2026-10-18: epss 3.4%2026-10-19: epss 3.4%2026-10-20: epss 3.4%2026-10-21: epss 3.4%3.4%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

NVD-CWE-noinfo

References 1