CVE-2021-38560

Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx

published February 1, 2022

CVSS
—
EPSS
3%
Percentile
86.8
In the wild
Unconfirmed
What it is

Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02893 · 86.8th percentile
Published
2022-02-01T15:25Z
EPSS history
Timeline
  • 01 FEB 15:25Z
    Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx
    cvelistv5