Ips (Ivanti) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-02-13. Vendor: Ivanti.

CVEs of Ips

• CVE-2024-22024 - CVSS 8.3 (high), 2024-02-13: An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways…
• CVE-2024-21888 - CVSS 8.8 (high), 2024-01-31: A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate…
• CVE-2024-21893 - CVSS 8.2 (high), 2024-01-31: A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons…
• CVE-2024-21887 - CVSS 9.1 (critical), 2024-01-12: A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated…
• CVE-2023-46805 - CVSS 8.2 (high), 2024-01-12: An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted…