A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service (DoS) of the appliance.
CVE ID: CVE-2023-39340
CVSS Base Severity: HIGH
CVSS Base Score: 7.5
Vendor: Ivanti
Product: Connect Secure
EPSS Score: 0.08% (probability of being exploited)
EPSS Percentile: 36.25% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)