288 matches found
Security Advisory - Avalanche CVE-2023-38036
Last Modified Date Mar 8, 2024 4:49:43 PM...
JSA10396 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - OpenSSL - Incorrect checks for malformed signatures on DSA and ECDSA keys used with SSL/TLS on backend servers. CVE-2008-5077.
Last Modified Date Aug 24, 2026 12:35:02 AM...
SA40161 - [Pulse Secure] glibc getaddrinfo stack-based buffer overflow (CVE-2015-7547)
Last Modified Date Aug 24, 2026 12:35:18 AM...
SA40168 - [Pulse Secure] March 1st 2016 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:35:17 AM...
SA44516 - 2020-07: Security Bulletin: Multiple Vulnerabilities Resolved in Pulse Connect Secure / Pulse Policy Secure 9.1R8
Problem This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R8 and Pulse Policy Secure 9.1R8. Refer to KB43892 - What releases will Pulse Secure apply fixes to resolve security vulnerabilities? per our End of Engineering EOE and End of Life EOL...
Is HEAT Classic (HEAT Serivce and Support) vulnerable to CVE-2021-44228 Java logging library (log4j)
Created Date Dec 14, 2021 3:12:00 PM...
Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-10727)
Update 11 June: FAQ Updated Summary Ivanti has released updates for Ivanti Endpoint Manager Mobile EPMM which addresses one high severity vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details CVE Number | Descriptio...
SA45100 - CVE-2022-0778-OpenSSL-Vulnerability may lead to DoS attack
Last Modified Date Dec 15, 2023 5:27:41 PM...
Security Advisory Ivanti CSA (Cloud Services Application) (CVE-2024-9379, CVE-2024-9380, CVE-2024-9381)
Summary Ivanti has released updates for Ivanti CSA Cloud Services Application which addresses a medium severity and two high severity vulnerabilities. Successful exploitation could lead to an attacker with admin privileges to bypass restrictions, run arbitrary SQL statements or obtain remote code...
SA-2023-07-19-CVE-2023-35077
SECURITY ADVISORY 07-19-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for Ivanti Antivirus Security Content version 7.94791 and all previous versions. Updating to Ivanti Antivirus Product version 7.9.1.285 will allow the Security Content version to update ...
SA40018 - System vulnerability issue in terms of CVE-2011-3188
Last Modified Date Aug 24, 2026 12:34:54 AM...
SA40886 - ssl3_read_bytes Function Denial of Service Vulnerability (CVE-2016-8610)
Last Modified Date Aug 24, 2026 12:34:38 AM...
SA44440 - April 21 2020 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:35:11 AM...
JSA10544 - 2012-11 Security Bulletin: Steel-Belted Radius: Multiple OpenSSL Vulnerabilities
Last Modified Date Mar 10, 2023 8:08:33 AM...
JSA10536 - 2012-09 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Specifically crafted https packet may cause denial of service
Last Modified Date Aug 24, 2026 12:34:47 AM...
SA44019 - February 26 2019 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:35:12 AM...
Security Advisory July 2025 for Ivanti EPM 2024 SU2 and EPM 2022 SU8
Security Advisory Ivanti EPM 2022 SU8 and EPM 2024 SU2 Multiple CVEs Summary Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. The Security vulnerability affects the Core, Remote Consoles and Windows agents. We are not aware of any...
Security Advisory: Ivanti Virtual Traffic Manager (vTM ) (CVE-2024-7593)
Created Date Aug 12, 2024 6:40:06 PM...
KB Security Advisory EPM May 2024
Created Date May 21, 2024 4:07:53 PM...
JSA10569 - 2013-05 Security Bulletin: Steel Belted Radius: OpenSSL vulnerability CVE-2012-2110
Last Modified Date Mar 10, 2023 8:08:38 AM...
SA40003 - [Pulse Secure] July 9th 2015 OpenSSL Security Advisory (CVE-2015-1793)
Last Modified Date Aug 24, 2026 12:34:55 AM...
SA40001 - [Pulse Secure] OpenSSL security advisory for March 19th, 2015
Last Modified Date Mar 4, 2024 7:41:14 PM...
SA43730 - 2018-04 Security Bulletin: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.0R1 and vTM 18.1
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.0R1, Pulse Policy Secure 9.0R1 and Virtual Traffic Manager 18.1 releases. Refer to...
SA45470 - OpenSSL Security Advisory CVE-2021-4154
Created Date Feb 14, 2023 7:22:22 AM...
Security Advisory Ivanti Endpoint Manager (EPM) August 2026
Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...
Security Advisory Ivanti Avalanche 6.4.4 (CVE-2024-38652, CVE-2024-38653, CVE-2024-36136, CVE-2024-37399, CVE-2024-37373)
Last Modified Date Aug 23, 2026 11:38:16 PM...
SA40140 - Pulse Secure response to CVE-2016-0777 and CVE-2016-0778
Last Modified Date Aug 24, 2026 12:35:20 AM...
SA44858 - 9.1R12 Security Fixes
Last Modified Date Aug 23, 2026 11:31:29 PM...
CVE-2022-0185
Last Modified Date Aug 24, 2026 12:30:52 AM...
Security Advisory Ivanti Sentry (CVE-2024-8540)
Security Advisory Ivanti Sentry CVE-2024-8540 Summary Ivanti has released updates for Ivanti Sentry which addresses one high severity vulnerability. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability Details: CVE Number | Descriptio...
Security patch release - Ivanti Connect Secure 22.6R2 and 22.6R2.1
Last Modified Date Apr 18, 2024 5:20:53 PM...
SA40196 - [Pulse Secure] Badlock security advisory (CVE-2016-2118)
Last Modified Date Aug 24, 2026 12:34:40 AM...
SA43903 - Response to SegmentSmack (CVE-2018-5390) and FragmentSmack (CVE-2018-5391)
Last Modified Date Aug 24, 2026 12:34:37 AM...
Impact of CVE-2023-22809 on EPMM, Sentry and Connector
Created Date Feb 10, 2023 7:30:23 AM...
Security Advisory Ivanti Neurons for ITSM (CVE-2026-9614)
Last Modified Date Aug 23, 2026 9:25:28 PM...
Security Advisory Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), Ivanti Secure Access Client (ISAC) (Multiple CVEs)
Summary Ivanti has released updates for Ivanti Connect Secure ICS,Ivanti Policy Secure IPS and Ivanti Secure Access Client ISAC which addresses medium, high and critical vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure...
SA:CVE-2024-21894 (Heap Overflow), CVE-2024-22052 (Null Pointer Dereference), CVE-2024-22053 (Heap Overflow), CVE-2024-22023 (XML entity expansion or XXE) and CVE-2024-29205 for Ivanti Connect Secure and Ivanti Policy Secure Gateways
Last Modified Date Apr 19, 2024 4:08:19 PM...
Avalanche 6.4.2 Security Hardening and CVEs addressed
Last Modified Date Aug 24, 2026 12:31:46 AM...
JSA10444 - 2010-06 Security Bulletin: Pulse Coennect Secure (PCS) and Pulse Policy Secure (PPS): Cross Site Scripting Issue during Signout
Last Modified Date Aug 24, 2026 12:34:56 AM...
SA45476 - Client Side Desync Attack (Informational)
Last Modified Date Aug 24, 2026 12:35:08 AM...
Avalanche 6.4.3 Security Hardening and CVEs addressed
Avalanche 6.4.3 has addressed some new security hardening and vulnerabilities in our Q1 2024 release. We are not aware of any exploitation of these vulnerabilities at the time of disclosure. To address the security vulnerabilities listed below, it is highly recommended to download the Avalanche...
CVE-2023-38041 New client side release to address a privilege escalation on Windows user machines
Summary A vulnerability exists on all versions of the Ivanti Secure Access Client Below 22.6R1 that would allow an unprivileged local user to gain unauthorized elevated privileges on the affected system. Mitigation Currently None Resoluiton To resolve the below mentioned vulnerability upgrade you...
JSA10380 - Security Vulnerability in Pulse Policy Secure Platform's Radius Authentication Server used in a Realm not doing Radius Proxy.
Last Modified Date Aug 24, 2026 12:35:05 AM...
Epmm + Sentry Not Affected by Cve-2026-4408 or Cve-2026-4480
Created Date Jun 5, 2026 4:45:08 PM...
Using Vulnerable Libssh Version < 0.12 in Sentry
Created Date Apr 20, 2026 4:12:24 AM...
Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340)
Update 29 Jan: Step by Step RPM Install KB included Update 4 Feb: Fixed in Security Update: 0S-4 and 0L-4 included Update: 6 Feb: RPM detection script available to help customers assess potential impact. Technical Analysis updated with reliable Indicators of Compromise IoC’s. Both in partnership...
Security Advisory Ivanti Cloud Services Application (CVE-2025-22460)
Summary: Ivanti has released updates for Ivanti Cloud Services Application which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure...
Security Advisory - Ivanti Security Controls (ISeC) (CVE-2024-10251)
Security Advisory Ivanti Security Controls iSec CVE-2024-10251 Summary Ivanti has released an update for the Ivanti Security Controls console which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being...
Security Advisory Velocity License Server (CVE-2024-9167)
Summary Ivanti has released updates for the Velocity License Server which addresses a high-severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...