Veille CVE

Recherche « Ivanti ICS »

2 CVE

  1. CVE-2026-104935 8.6 Élevée Exploitée

    Ivanti Connect Secure

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.

  2. CVE-2024-21893 8.2 Élevée Exploitée Rançongiciel

    Ivanti ICS · Ivanti IPS · ivanti connect_secure · ivanti policy_secure

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.