CVSS 3.1 Score 7.5 of 10 (high)


Published Sep 21, 2023
Updated: Sep 25, 2023
CWE ID 611


CVE-2023-38343 is an XML external entity injection (XXE) vulnerability found in the CSEP component of Ivanti Endpoint Manager before 2022 SU4. This vulnerability affects various products, including oLRXKP, gGyhBg, gGyhBh, apT-G4, syj3rW, syj3rX, tHubRh, pKnQIj, pKnQIi, r8e1NE, pKnQIh, U9Cep1, U9Cep2, U9Cep3, oQunDN, gGyhBf, oQunDO, and apT-G3. The vulnerability allows for file disclosure or Server Side Request Forgery when exploited. It has a high base severity rating with a CVSS score of 7.5 and poses a potential risk to confidentiality. No remediation steps or further analysis description are provided in the source text.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-38343 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options