Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Ivanti Policy Secure 22.4R1.2, 22.5R1.3 and 4 more versions Clear all filters
TI-2024-14671 CVE-2024-22053 · GHSA-vmgj-7wpp-x799

Out-of-bounds write in Ivanti Connect Secure

Priority MEDIUM 50

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service ther…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.03532 Published 2024-04-04 Fixed in 22.1R6.2, 22.2R4.2 +12 CWE-703
TI-2024-14670 CVE-2024-22052 · GHSA-5rw8-2rrx-mf5m

NULL pointer dereference in Ivanti Connect Secure

Priority MEDIUM 45

A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0375 Published 2024-04-04 Fixed in 22.1R6.2, 22.2R4.2 +12 CWE-703
TI-2024-14644 CVE-2024-22023 · GHSA-mfj7-pc34-cqm8

NULL pointer dereference in Ivanti Connect Secure

Priority LOW 36

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporari…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03 Published 2024-04-04 Fixed in 22.1R6.2, 22.2R4.2 +12 CWE-703