CVE-2024-38657

score

<0.1

cvss

4.9

epss

1.6%

published

2025-02-21

kev added

—

first seen

2026-10-21

Ivanti Connect Secure < 22.7R2.4 and Ivanti Policy Secure < 22.7R1.3 contain a file name external control vulnerability caused by insufficient validation, letting remote authenticated attackers with admin privileges write arbitrary files, exploit requires attacker to have admin privileges.