Veille CVE

Recherche « Ivanti IPS »

3 CVE

Critique 1 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ivanti IPS » ✕
  1. CVE-2024-21893 8.2 Élevée Exploitée Rançongiciel

    Ivanti ICS · Ivanti IPS · ivanti connect_secure · ivanti policy_secure

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

  2. CVE-2024-21887 9.1 Critique Exploitée Rançongiciel

    Ivanti ICS · Ivanti IPS · Ivanti connect secure · Ivanti policy secure

    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

  3. CVE-2023-46805 8.2 Élevée Exploitée Rançongiciel

    Ivanti ICS · Ivanti IPS · Ivanti connect secure · Ivanti policy secure

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.