Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2023-46805

🗓️ 12 Jan 2024 17:02:16Reported by hackeroneType 
cve
 cve🔗 web.nvd.nist.gov📰️ 29 Media mentions👁 713 Views

An authentication bypass vulnerability in Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows remote access to restricted resources

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
0day.today		Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit
22 Jan 202400:00
–zdt
0day.today		Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit
21 Feb 202400:00
–zdt
GithubExploit		Exploit for Improper Authentication in Ivanti Connect_Secure
16 Jan 202408:05
–githubexploit
GithubExploit		Exploit for Improper Authentication in Ivanti Connect_Secure
18 Jan 202413:25
–githubexploit
GithubExploit		Exploit for Improper Authentication in Ivanti Connect_Secure
14 Jan 202418:30
–githubexploit
GithubExploit		Exploit for Improper Authentication in Ivanti Connect_Secure
14 Jan 202418:30
–githubexploit
GithubExploit		Exploit for Improper Authentication in Ivanti Connect_Secure
25 Jan 202414:53
–githubexploit
GithubExploit		Exploit for Improper Authentication in Ivanti Connect_Secure
19 Jan 202402:23
–githubexploit
GithubExploit		Exploit for Improper Authentication in Ivanti Connect_Secure
16 Jan 202419:40
–githubexploit
GithubExploit		Exploit for Deserialization of Untrusted Data in Facebook React
13 Dec 202503:48
–githubexploit
Rows per page
NVD
Vulners
Node
ivanticonnect_secureMatch9.0
OR
ivanticonnect_secureMatch9.1r1
OR
ivanticonnect_secureMatch9.1r10
OR
ivanticonnect_secureMatch9.1r11
OR
ivanticonnect_secureMatch9.1r11.3
OR
ivanticonnect_secureMatch9.1r11.4
OR
ivanticonnect_secureMatch9.1r11.5
OR
ivanticonnect_secureMatch9.1r12
OR
ivanticonnect_secureMatch9.1r12.1
OR
ivanticonnect_secureMatch9.1r13
OR
ivanticonnect_secureMatch9.1r13.1
OR
ivanticonnect_secureMatch9.1r14
OR
ivanticonnect_secureMatch9.1r15
OR
ivanticonnect_secureMatch9.1r15.2
OR
ivanticonnect_secureMatch9.1r16
OR
ivanticonnect_secureMatch9.1r16.1
OR
ivanticonnect_secureMatch9.1r17
OR
ivanticonnect_secureMatch9.1r17.1
OR
ivanticonnect_secureMatch9.1r18
OR
ivanticonnect_secureMatch9.1r2
OR
ivanticonnect_secureMatch9.1r3
OR
ivanticonnect_secureMatch9.1r4
OR
ivanticonnect_secureMatch9.1r4.1
OR
ivanticonnect_secureMatch9.1r4.2
OR
ivanticonnect_secureMatch9.1r4.3
OR
ivanticonnect_secureMatch9.1r5
OR
ivanticonnect_secureMatch9.1r6
OR
ivanticonnect_secureMatch9.1r7
OR
ivanticonnect_secureMatch9.1r8
OR
ivanticonnect_secureMatch9.1r8.1
OR
ivanticonnect_secureMatch9.1r8.2
OR
ivanticonnect_secureMatch9.1r9
OR
ivanticonnect_secureMatch9.1r9.1
OR
ivanticonnect_secureMatch22.1r1
OR
ivanticonnect_secureMatch22.1r6
OR
ivanticonnect_secureMatch22.2-
OR
ivanticonnect_secureMatch22.2r1
OR
ivanticonnect_secureMatch22.3r1
OR
ivanticonnect_secureMatch22.4r1
OR
ivanticonnect_secureMatch22.4r2.1
OR
ivanticonnect_secureMatch22.5r2.1
OR
ivanticonnect_secureMatch22.6-
OR
ivanticonnect_secureMatch22.6r1
OR
ivanticonnect_secureMatch22.6r2
OR
ivantipolicy_secureMatch9.0
OR
ivantipolicy_secureMatch9.1r1
OR
ivantipolicy_secureMatch9.1r10
OR
ivantipolicy_secureMatch9.1r11
OR
ivantipolicy_secureMatch9.1r12
OR
ivantipolicy_secureMatch9.1r13
OR
ivantipolicy_secureMatch9.1r13.1
OR
ivantipolicy_secureMatch9.1r14
OR
ivantipolicy_secureMatch9.1r15
OR
ivantipolicy_secureMatch9.1r16
OR
ivantipolicy_secureMatch9.1r17
OR
ivantipolicy_secureMatch9.1r18
OR
ivantipolicy_secureMatch9.1r2
OR
ivantipolicy_secureMatch9.1r3
OR
ivantipolicy_secureMatch9.1r3.1
OR
ivantipolicy_secureMatch9.1r4
OR
ivantipolicy_secureMatch9.1r4.1
OR
ivantipolicy_secureMatch9.1r4.2
OR
ivantipolicy_secureMatch9.1r5
OR
ivantipolicy_secureMatch9.1r6
OR
ivantipolicy_secureMatch9.1r7
OR
ivantipolicy_secureMatch9.1r8
OR
ivantipolicy_secureMatch9.1r8.1
OR
ivantipolicy_secureMatch9.1r8.2
OR
ivantipolicy_secureMatch9.1r9
OR
ivantipolicy_secureMatch22.1r1
OR
ivantipolicy_secureMatch22.1r6
OR
ivantipolicy_secureMatch22.2r1
OR
ivantipolicy_secureMatch22.2r3
OR
ivantipolicy_secureMatch22.3r1
OR
ivantipolicy_secureMatch22.3r3
OR
ivantipolicy_secureMatch22.4r1
OR
ivantipolicy_secureMatch22.4r2
OR
ivantipolicy_secureMatch22.4r2.1
OR
ivantipolicy_secureMatch22.5r1
OR
ivantipolicy_secureMatch22.5r2.1
OR
ivantipolicy_secureMatch22.6r1
[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "ICS",
    "versions": [
      {
        "version": "9.1R18",
        "status": "affected",
        "lessThanOrEqual": "9.1R18",
        "versionType": "semver"
      },
      {
        "version": "22.6R2",
        "status": "affected",
        "lessThanOrEqual": "22.6R2",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "IPS",
    "versions": [
      {
        "version": "9.1R18",
        "status": "affected",
        "lessThanOrEqual": "9.1R18",
        "versionType": "semver"
      },
      {
        "version": "22.6R1",
        "status": "affected",
        "lessThanOrEqual": "22.6R1",
        "versionType": "semver"
      }
    ]
  }
]
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 06:31Current
8.9High risk
Vulners AI Score8.9
CVSS 3.18.2
CVSS 38.2
EPSS0.99986
SSVC
CWE-287In Wild
cve-2023-46805authentication bypassivantiicspolicy secureweb componentremote attacker
713