Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

🗓️ 31 Jan 2024 00:00:00Reported by CISAType

cisa_kev🔗 www.cisa.gov👁 61 Views

Ivanti Connect Secure, Policy Secure, and Neurons SSRF Vulnerability

Reporter	Title	Published	Views	Family All 61
zdt	Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit	21 Feb 202400:00	–	zdt
GithubExploit	Exploit for Command Injection in Ivanti Connect_Secure	3 Feb 202411:33	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Ivanti Connect_Secure	2 Feb 202422:59	–	githubexploit
ICS	Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways	29 Feb 202412:00	–	ics
ATTACKERKB	CVE-2024-21893	31 Jan 202400:00	–	attackerkb
Information Security Automation	February 2024: Vulremi, Vuldetta, PT VM Course relaunch, PT TrendVulns digests, Ivanti, Fortinet, MSPT, Linux PW	5 Mar 202418:43	–	avleonov
BDU FSTEC	The vulnerability of the SAML components in Ivanti Connect Secure and Ivanti Policy Secure access control tools allows a perpetrator to disclose protected information.	6 Feb 202400:00	–	bdu_fstec
Circl	CVE-2024-21893	10 Jan 202420:21	–	circl
CISA	Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways	15 Feb 202412:00	–	cisa
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	31 Jan 202412:00	–	cisa

31 Jan 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.2

CVSS 38.2

EPSS0.99999

SSVC

ivanti connect secure policy secure neurons ssrf vulnerability saml authentication