Veille CVE

Recherche « ivanti policy_secure »

6 CVE

Critique 3 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « ivanti policy_secure » ✕
  1. CVE-2025-22457 9.8 Critique Exploitée Rançongiciel

    Ivanti Connect Secure · Ivanti Policy Secure · Ivanti Neurons for ZTA gateways · Ivanti zero trust access gateway

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.

  2. CVE-2025-0282 9.0 Critique Exploitée Rançongiciel

    Ivanti Connect Secure · Ivanti Policy Secure · Ivanti Neurons for ZTA gateways · Ivanti neurons for zero-trust access

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

  3. CVE-2024-21893 8.2 Élevée Exploitée Rançongiciel

    Ivanti ICS · Ivanti IPS · ivanti connect_secure · ivanti policy_secure

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

  4. CVE-2024-21887 9.1 Critique Exploitée Rançongiciel

    Ivanti ICS · Ivanti IPS · Ivanti connect secure · Ivanti policy secure

    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.

  5. CVE-2023-46805 8.2 Élevée Exploitée Rançongiciel

    Ivanti ICS · Ivanti IPS · Ivanti connect secure · Ivanti policy secure

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

  6. CVE-2020-8218 7.2 Élevée Exploitée

    Pulse Connect Secure · Ivanti connect secure · Ivanti policy secure · Pulsesecure pulse policy secure

    A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.