{
    "id": "CVE-2024-21887",
    "published": "2024-01-12 17:15:10",
    "last_modified": "2026-08-04 05:16:30",
    "cvss_score": "9.1",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
    "cwe": "CWE-77",
    "description": "A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x)  allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.",
    "epss_score": "0.99999",
    "epss_percentile": "0.99999",
    "kev": 1,
    "kev_due": "2024-01-22",
    "has_exploit": 0,
    "updated_at": "2026-09-26 18:33:27",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2024-01-22."
    },
    "products": [
        {
            "vendor": "ivanti",
            "product": "connect_secure"
        },
        {
            "vendor": "ivanti",
            "product": "policy_secure"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2024-21887",
        "date_added": "2024-01-10",
        "due_date": "2024-01-22",
        "vendor": "Ivanti",
        "product": "Connect Secure and Policy Secure",
        "name": "Ivanti Connect Secure and Policy Secure Command Injection Vulnerability",
        "ransomware": 1
    },
    "exploits": [],
    "refs_list": [
        "http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html",
        "https://forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US",
        "http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html",
        "https://forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-21887"
    ]
}