CVE-2023-38043: Ivanti Secure Access Client

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine and, in some cases, resulting in a full compromise of the system.

Affected products

• Ivanti Secure Access Client: before 22.6 (fixed in 22.6); version 22.6 only

Published 2023-11-15. Last modified 2026-06-17.