Ivanti Connect Secure 9.1Rx < 9.1R18.5 / 22.x < 22.4R1.1 / 22.5Rx < 22.5R2.3 / 22.6Rx < 22.6R2.2 Multiple Vulnerabilities

The Ivanti Connect Secure installed on the remote host is 9.1Rx prior to 9.1R18.5, 22.x prior to 22.4R1.1, 22.5Rx prior to 22.5R2.3, or 22.6Rx 22.6R2.2. It is, therefore, affected by multiple vulnerabilities. - A vulnerability exists on both branches of Ivanti Connect Secure 9.1Rx and 22x below...

CVE-2023-39340

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service DoS of the appliance...

CVE-2023-39340

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service DoS of the appliance...

Design/Logic Flaw

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service DoS of the appliance...

CVE-2023-39340

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service DoS of the appliance...

CVE-2023-39340

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service DoS of the appliance...

CVE-2023-39340

Ivanti Connect Secure is affected on all versions below 22.6R2 where an attacker can send a specific request that may lead to a Denial of Service (DoS) of the appliance. The issue is confirmed across multiple advisories (CVE-2023-39340) and is addressed by upgrades to patched releases: 22.x (e.g....

Ivanti Connect Secure Security Vulnerability

Ivanti Connect Secure is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in versions prior to Ivanti Connect Secure 22.6R2 that stems from the presence of a Denial of Service DoS vulnerability...

PT-2023-26887 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.6R2 Description: A vulnerability exists where an attacker can send a specific request, potentially leading to Denial of Service DoS of the appliance. Recommendations: For versions prior to 22.6R2,...

CVE-2023-39340: Undefined Security Weakness

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service DoS of the appliance...

CVE-2023-41720

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure ICS appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated executio...

CVE-2023-41719

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution...

CVE-2023-41719

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution...

CVE-2023-41720

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure ICS appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated executio...

Design/Logic Flaw

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure ICS appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated executio...

Remote code execution

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution...

CVE-2023-41720

CVE-2023-41720 affects Ivanti Connect Secure (ICS) on the 22.x branch prior to 22.6R2. An attacker with foothold on an ICS appliance can escalate privileges by exploiting a vulnerable installed application, gaining elevated execution privileges on the system. Affected versions include 22.x varian...

CVE-2023-41720

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure ICS appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated executio...

CVE-2023-41719

CVE-2023-41719 affects Ivanti Connect Secure prior to 22.6R2 (both 9.1Rx and 22x branches). An attacker impersonating an administrator can craft a specific web request that leads to remote code execution. Remediation per patch guidance: upgrade to fixed versions such as 22.6R2.2, 22.5R2.3, 22.4R1...

CVE-2023-41719

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution...