292 matches found
JSA10396 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - OpenSSL - Incorrect checks for malformed signatures on DSA and ECDSA keys used with SSL/TLS on backend servers. CVE-2008-5077.
Last Modified Date Aug 24, 2026 12:35:02 AM...
SA40018 - System vulnerability issue in terms of CVE-2011-3188
Last Modified Date Aug 24, 2026 12:34:54 AM...
SA43730 - 2018-04 Security Bulletin: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.0R1 and vTM 18.1
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.0R1, Pulse Policy Secure 9.0R1 and Virtual Traffic Manager 18.1 releases. Refer to...
August 2026 Security Advisory Ivanti Neurons for MDM
August 2026 Security Advisory Ivanti Neurons for MDM Summary Ivanti has released updates for Ivanti Neurons for MDM which addresses one medium vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: Description | CVS...
KB Possible Remote Exploit in ApacheMQ pertaining to OpenWire Module
Created Date Nov 13, 2023 7:08:12 PM...
SA40135 - Linux kernel: Possible use-after-free vulnerability in keyring facility (CVE-2016-0728)
Last Modified Date Aug 24, 2026 12:35:21 AM...
SA40423 - January 26, 2017 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:35:14 AM...
SA45100 - CVE-2022-0778-OpenSSL-Vulnerability may lead to DoS attack
Last Modified Date Dec 15, 2023 5:27:41 PM...
SAML 2.0 SP signature validation behaviour from ICS 25.1.3.0
Last Modified Date Jul 3, 2026 11:45:26 AM...
Using Vulnerable Libssh Version < 0.12 in Sentry
Created Date Apr 20, 2026 4:12:24 AM...
Security Advisory - Avalanche CVE-2023-38036
Last Modified Date Mar 8, 2024 4:49:43 PM...
JSA10380 - Security Vulnerability in Pulse Policy Secure Platform's Radius Authentication Server used in a Realm not doing Radius Proxy.
Last Modified Date Aug 24, 2026 12:35:05 AM...
SA44019 - February 26 2019 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:35:12 AM...
Is HEAT Classic (HEAT Serivce and Support) vulnerable to CVE-2021-44228 Java logging library (log4j)
Created Date Dec 14, 2021 3:12:00 PM...
Security Advisory Ivanti Cloud Services Application (CVE-2025-22460)
Summary: Ivanti has released updates for Ivanti Cloud Services Application which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure...
Security Advisory Ivanti Avalanche 6.4.4 (CVE-2024-38652, CVE-2024-38653, CVE-2024-36136, CVE-2024-37399, CVE-2024-37373)
Last Modified Date Aug 23, 2026 11:38:16 PM...
Security Advisory: Ivanti Virtual Traffic Manager (vTM ) (CVE-2024-7593)
Created Date Aug 12, 2024 6:40:06 PM...
SA-2023-07-19-CVE-2023-35077
SECURITY ADVISORY 07-19-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for Ivanti Antivirus Security Content version 7.94791 and all previous versions. Updating to Ivanti Antivirus Product version 7.9.1.285 will allow the Security Content version to update ...
JSA10544 - 2012-11 Security Bulletin: Steel-Belted Radius: Multiple OpenSSL Vulnerabilities
Last Modified Date Mar 10, 2023 8:08:33 AM...
JSA10536 - 2012-09 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Specifically crafted https packet may cause denial of service
Last Modified Date Aug 24, 2026 12:34:47 AM...
SA44440 - April 21 2020 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:35:11 AM...
Security Advisory Ivanti Sentry (CVE-2024-8540)
Security Advisory Ivanti Sentry CVE-2024-8540 Summary Ivanti has released updates for Ivanti Sentry which addresses one high severity vulnerability. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability Details: CVE Number | Descriptio...
Security Advisory Ivanti CSA (Cloud Services Application) (CVE-2024-9379, CVE-2024-9380, CVE-2024-9381)
Summary Ivanti has released updates for Ivanti CSA Cloud Services Application which addresses a medium severity and two high severity vulnerabilities. Successful exploitation could lead to an attacker with admin privileges to bypass restrictions, run arbitrary SQL statements or obtain remote code...
KB Security Advisory EPM May 2024
Created Date May 21, 2024 4:07:53 PM...
CVE-2023-38041 New client side release to address a privilege escalation on Windows user machines
Summary A vulnerability exists on all versions of the Ivanti Secure Access Client Below 22.6R1 that would allow an unprivileged local user to gain unauthorized elevated privileges on the affected system. Mitigation Currently None Resoluiton To resolve the below mentioned vulnerability upgrade you...
CVE-2022-0185
Last Modified Date Aug 24, 2026 12:30:52 AM...
Security Advisory July 2025 for Ivanti EPM 2024 SU2 and EPM 2022 SU8
Security Advisory Ivanti EPM 2022 SU8 and EPM 2024 SU2 Multiple CVEs Summary Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. The Security vulnerability affects the Core, Remote Consoles and Windows agents. We are not aware of any...
SA40003 - [Pulse Secure] July 9th 2015 OpenSSL Security Advisory (CVE-2015-1793)
Last Modified Date Aug 24, 2026 12:34:55 AM...
SA40886 - ssl3_read_bytes Function Denial of Service Vulnerability (CVE-2016-8610)
Last Modified Date Aug 24, 2026 12:34:38 AM...
SA:CVE-2024-21894 (Heap Overflow), CVE-2024-22052 (Null Pointer Dereference), CVE-2024-22053 (Heap Overflow), CVE-2024-22023 (XML entity expansion or XXE) and CVE-2024-29205 for Ivanti Connect Secure and Ivanti Policy Secure Gateways
Last Modified Date Apr 19, 2024 4:08:19 PM...
Avalanche 6.4.2 Security Hardening and CVEs addressed
Last Modified Date Aug 24, 2026 12:31:46 AM...
JSA10569 - 2013-05 Security Bulletin: Steel Belted Radius: OpenSSL vulnerability CVE-2012-2110
Last Modified Date Mar 10, 2023 8:08:38 AM...
SA40001 - [Pulse Secure] OpenSSL security advisory for March 19th, 2015
Last Modified Date Mar 4, 2024 7:41:14 PM...
SA40140 - Pulse Secure response to CVE-2016-0777 and CVE-2016-0778
Last Modified Date Aug 24, 2026 12:35:20 AM...
SA45476 - Client Side Desync Attack (Informational)
Last Modified Date Aug 24, 2026 12:35:08 AM...
Security Advisory Ivanti Neurons for ITSM (CVE-2026-9614)
Last Modified Date Aug 23, 2026 9:25:28 PM...
Impact Of CVE-2025-55752 And CVE-2025-55754 On EPMM, Sentry, Connector
Last Modified Date Oct 31, 2025 3:15:00 PM...
Security Advisory - Ivanti Security Controls (ISeC) (CVE-2024-10251)
Security Advisory Ivanti Security Controls iSec CVE-2024-10251 Summary Ivanti has released an update for the Ivanti Security Controls console which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being...
Security Advisory Ivanti Connect Secure and Policy Secure (CVE-2024-37404)
Summary Ivanti has released updates for Ivanti Connect Secure and Policy Secure which addresses a critical vulnerability. Successful exploitation could allow a remote authenticated attacker to achieve remote code execution. We are not aware of any customers being exploited by this vulnerability a...
JSA10444 - 2010-06 Security Bulletin: Pulse Coennect Secure (PCS) and Pulse Policy Secure (PPS): Cross Site Scripting Issue during Signout
Last Modified Date Aug 24, 2026 12:34:56 AM...
SA40107 - Response to Juniper ScreenOS security advisory JSA10713 (CVE-2015-7755 and CVE-2015-7756)
Last Modified Date Aug 24, 2026 12:34:41 AM...
SA40208 - [Pulse Secure] Single specific file content disclosure issue (CVE-2016-4788)
Last Modified Date Aug 24, 2026 12:35:16 AM...
SA43903 - Response to SegmentSmack (CVE-2018-5390) and FragmentSmack (CVE-2018-5391)
Last Modified Date Aug 24, 2026 12:34:37 AM...
SA45470 - OpenSSL Security Advisory CVE-2021-4154
Created Date Feb 14, 2023 7:22:22 AM...
Impact of CVE-2023-22809 on EPMM, Sentry and Connector
Created Date Feb 10, 2023 7:30:23 AM...
Security Advisory Ivanti Neurons for ITSM (On-Premises Only) (CVE-2025-22462)
Security Advisory Ivanti Neurons for ITSM on-premises only CVE-2025-22462 Summary Ivanti has released updates for Ivanti Neurons for ITSM on-prem only which addresses one critical severity vulnerability. Depending on system configuration, successful exploitation could allow an unauthenticated...
Security Advisory Ivanti Avalanche (Multiple CVEs) - Q4 2024 Release
Summary Ivanti has released updates for Ivanti Avalanche which addresses five high severity vulnerabilities. Successful exploitation could lead to denial of service to legitimate users or leaking of sensitive information. We are not aware of any customers being exploited by these vulnerabilities ...
Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2024-7612)
Summary: Ivanti has released updates for Ivanti EPMM which addresses a high severity vulnerability. Successful exploitation could lead to an authenticated attacker accessing or modifying configuration files. We are not aware of any customers being exploited by these vulnerabilities at the time of...