Login Request a demo
IP
Product
IPS
by Ivanti · last CVE Feb 13, 2024
On CISA KEVExploited in the wildRansomware-linked
5
CVEs
3
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 4Medium 0Low 0
Severity
All severities5Critical1High4Medium0Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add IPS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-21893
RansomwareIn wildKEV
8.2
100%
Jan 31
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
Affected: 9.1R18 through 9.1R18; 22.6R1 through 22.6R1
CVE-2023-46805
RansomwareIn wildKEV
8.2
100%
Jan 12
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
Affected: 9.1R18 through 9.1R18; 22.6R1 through 22.6R1
CVE-2024-21888
8.8
85%
Jan 31
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an…
Affected: 9.1R18 through 9.1R18; 22.6R1 through 22.6R1
CVE-2024-22024
8.3
95%
Feb 13
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker…
Affected: 9.1R18.4 before 9.1R18.4; 9.1R17.3 before 9.1R17.3; 22.5R1.2 before 22.5R1.2
Showing 4