Code injection

2022-12-0522:15:00

PRIOn knowledge base

www.prio-n.com

code injection

unauthenticated attacker

denial-of-service

ivanti connect secure

ivanti policy secure

ivanti neurons

nvd

0.001 Low

EPSS

Percentile

40.4%

JSON

An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.

CPENameOperatorVersion
connect_securelt9.1
connect_secureeq22.1 r1
connect_secureeq22.2 r1
connect_secureeq9.1 r16.1
connect_secureeq9.1 r16
connect_secureeq9.1 r15
connect_secureeq21.9 r1
connect_secureeq21.12 r1
connect_secureeq22.2
connect_secureeq9.1 r1

Name	Operator	Version
connect_secure	lt	9.1
connect_secure	eq	22.1 r1
connect_secure	eq	22.2 r1
connect_secure	eq	9.1 r16.1
connect_secure	eq	9.1 r16
connect_secure	eq	9.1 r15
connect_secure	eq	21.9 r1
connect_secure	eq	21.12 r1
connect_secure	eq	22.2
connect_secure	eq	9.1 r1

Rows per page:

1-10 of 761

References

kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA45520/?kA23Z000000GH5OSAW

0.001 Low

EPSS

Percentile

40.4%

JSON

Related for PRION:CVE-2022-35254