MEDIUMCVSS 4.01% EPSS
An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote unauthenticated attacker to redirect users to arbitrary external URLs.
Published 2026-07-14 · last modified 2026-08-06
| Vendor | Product |
|---|---|
| ivanti | xtraction |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.