CVE coverage

CVE-2024-21887

CVSS 9.1 Actively exploited (KEV) 3 detections found

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

Detection rules

Source	Rule	Status	Updated
splunk	Access to Vulnerable Ivanti Connect Secure Bookmark Endpoint	production	2026-05-13
splunk	Ivanti Connect Secure Command Injection Attempts	production	2026-05-13
splunk	Ivanti Connect Secure System Information Access via Auth Bypass	production	2026-05-13