Vulnerabilidades do Ivanti ICS

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ivanti ICS: 3 registro(s), com versões afetadas e correções.

CVE-2024-21893 Alta · 8.2 KEV Urgente · 89 Exploit público Ransomware CWE-918 31/01/2024

Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

CVE-2024-21887 Crítica · 9.1 KEV Urgente · 90 Exploit público Ransomware CWE-77 12/01/2024

Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

CVE-2023-46805 Alta · 8.2 KEV Urgente · 99 Exploit público Ransomware CWE-287 12/01/2024

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.