288 matches found
CVE-2023-46805 (Authentication Bypass) & CVE-2024-21887 (Command Injection) for Ivanti Connect Secure and Ivanti Policy Secure Gateways
DESCRIPTION: Vulnerabilities have been discovered in Ivanti Connect Secure ICS, formerly known as Pulse Connect Secure and Ivanti Policy Secure gateways. These vulnerabilities impact all supported versions – Version 9.x and 22.x refer to Granular Software Release EOL Timelines and Support Matrix...
Security fixes included in the latest Ivanti Secure Access Client Release
Last Modified Date Nov 16, 2023 2:01:28 PM...
Security Advisory Ivanti Xtraction (CVE-2026-14902, CVE-2026-14903)
Last Modified Date Aug 23, 2026 9:09:38 PM...
Impact Of CVE-2025-55752 And CVE-2025-55754 On EPMM, Sentry, Connector
Last Modified Date Oct 31, 2025 3:15:00 PM...
Security Advisory Ivanti Avalanche (Multiple CVEs) - Q4 2024 Release
Summary Ivanti has released updates for Ivanti Avalanche which addresses five high severity vulnerabilities. Successful exploitation could lead to denial of service to legitimate users or leaking of sensitive information. We are not aware of any customers being exploited by these vulnerabilities ...
Security Advisory Ivanti Connect Secure and Policy Secure (CVE-2024-37404)
Summary Ivanti has released updates for Ivanti Connect Secure and Policy Secure which addresses a critical vulnerability. Successful exploitation could allow a remote authenticated attacker to achieve remote code execution. We are not aware of any customers being exploited by this vulnerability a...
Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2024-7612)
Summary: Ivanti has released updates for Ivanti EPMM which addresses a high severity vulnerability. Successful exploitation could lead to an authenticated attacker accessing or modifying configuration files. We are not aware of any customers being exploited by these vulnerabilities at the time of...
Security Advisory CVE-2024-37403 (Dirty Stream) for Ivanti Docs@Work for Android
Created Date Jul 16, 2024 4:15:18 PM...
Avalanche Vulnerabilities Addressed in 6.4.1
Securtiy Advisory for Avalanche 6.4 and older. To resolve these vulnerabilities, please upgrade to Avalanche 6.4.1.207 Download Page: https://www.wavelink.com/Download-AvalancheMobile-Device-Management-Software/ Release Notes:...
JSA10482 - 2011-07 Out of Cycle Security Bulletin: Multiple Products; TLS/SSL Renegotiation Vulnerability (CVE-2009-3555)
Last Modified Date Aug 24, 2026 12:34:49 AM...
SA40107 - Response to Juniper ScreenOS security advisory JSA10713 (CVE-2015-7755 and CVE-2015-7756)
Last Modified Date Aug 24, 2026 12:34:41 AM...
Security Advisory Ivanti Endpoint Manager (EPM) October 2025
Security Advisory Ivanti Endpoint Manager EPM October 2025 Multiple CVEs Summary Update Nov. 11, 2025: A fix has been released for CVE-2025-11622 and CVE-2025-9713. To resolve these vulnerabilities customers should update to EPM 2024 SU4. Update Feb. 10, 2026: A fix to resolve the remaining CVE's...
Security Advisory Ivanti CSA 4.6 (Cloud Services Appliance) (CVE-2024-8963)
Summary Ivanti is disclosing a critical vulnerability in Ivanti CSA 4.6 which was incidentally addressed in the patch released on 10 September CSA 4.6 Patch 519. Successful exploitation could allow a remote unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in...
Security Advisory Ivanti Workspace Control (IWC)
Summary Ivanti has released a version of a new product architecture for Ivanti Workspace Control IWC which addresses high and critical vulnerabilities. Successful exploitation could lead to an escalation of privileges and lateral movement. IWC is intended to be a non-internet facing product, and...
Security Advisory Ivanti Cloud Service Appliance (CSA) (CVE-2024-8190)
Summary Ivanti has released a security update for Ivanti CSA 4.6 which addresses a high severity vulnerability. Successful exploitation could lead to unauthorized access to the device running the CSA. Dual-homed CSA configurations with eth0 as an internal network, as recommended by Ivanti, are at...
Security Advisory EPM September 2024 for EPM 2024 and EPM 2022
Update Regarding Ivanti EPM Endpoint Manager Downloads As part of our ongoing efforts to enhance your experience and streamline our processes we have migrated the software downloads from the Ivanti Community to the Ivanti License System ILS. You will continue to use your current Ivanti Single...
Security Advisory: Ivanti Neurons for ITSM (CVE-2024-7569, CVE-2024-7570)
Last Modified Date Aug 23, 2026 11:33:04 PM...
Security Advisory EPM July 2024 for EPM 2024
Created Date Jul 16, 2024 4:16:53 PM...
CVE-2024-22024 (XXE) for Ivanti Connect Secure and Ivanti Policy Secure
Executive Summary: As part of the ongoing investigation, we discovered a new vulnerability as part of our internal review and testing of our code, which was also responsibly disclosed by watchTowr. This vulnerability only affects a limited number of supported versions – Ivanti Connect Secure...
SA-2023-12-19-CVE-2023-39336
SECURITY ADVISORY 2023-12-19 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for EPM 2022 SU4 and all prior versions. More information can be found here: CVE-2023-39336 Full details Please log into the community to access the full details page. Vulnerability...
KB API Authentication Bypass on Sentry Administrator Interface - CVE-2023-38035
Last Modified Date Sep 5, 2023 9:01:44 AM...
SA40166 - Remote desktop protocol (RDP) client restriction bypass issue
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A security issue was discovered in the PCS Terminal Services Remote Desktop Protocol RDP client session restrictions feature. By exploiting this issue a malicious authenticated user...
SA40210 - [Pulse Secure] Information disclosure possible on admin UI (CVE-2016-4791)
Last Modified Date Aug 24, 2026 12:35:15 AM...
SA40384 - November 11, 2016 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:34:39 AM...
SA44588 - 2020-09: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.1R8.2
Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R8.2, Pulse Policy Secure 9.1R8.2 Refer to KB43892 - What releases will Pulse Secur...
Security Advisory Ivanti Neurons for ITSM (CVE-2026-4913, CVE-2026-4914)
Last Modified Date Aug 23, 2026 9:35:37 PM...
Impact Of CVE-2025-32462, CVE-2025-32463 On Ivanti EPMM and Sentry
Created Date Jul 7, 2025 8:33:20 AM...
December 2024 Security Advisory Ivanti Automation (CVE-2024-9845)
Summary Ivanti has released updates for Automation which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CVE Numbe...
Security Advisory EPM November 2024 for EPM 2024 and EPM 2022 SU6
Update Regarding Ivanti EPM Endpoint Manager Downloads As part of our ongoing efforts to enhance your experience and streamline our processes we have migrated the software downloads from the Ivanti Community to the Ivanti License System ILS. You will continue to use your current Ivanti Single...
Ivanti Avalanche 6.4.5 Security Advisory (Multiple CVE's)
Summary Ivanti has released updates for Ivanti Avalanche which addresses high severity vulnerabilities. Successful exploitation could lead to information disclosure, authentication bypass or denial of service. We are not aware of any customers being exploited by these vulnerabilities at the time ...
SA: CVE-2023-46808 (Authenticated Remote File Write) for Ivanti Neurons for ITSM
Created Date Mar 20, 2024 2:26:49 AM...
CVE-2023-38035 – API Authentication Bypass on Sentry Administrator Interface
Last Modified Date Aug 23, 2026 11:52:15 PM...
CVE-2023-35081 - Remote Arbitrary File Write
Last Modified Date Aug 3, 2023 2:34:52 PM...
JSA10401 - Pulse Connect Secure (PCS) product - PCS Security Bundle - Internal System Function
Last Modified Date Aug 24, 2026 12:34:59 AM...
SA40013 - TLS/SSL Renegotiation Vulnerability Pulse Connect Secure (PCS) (CVE-2009-3555) (Pulse Secure PSN-2009-11-573
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. The industry-wide TLS/SSL renegotiation issue CVE-2009-3555 has been found in the Pulse Connect Secure PCS device. This issue has been reported as a man in the middle MITM attack by ma...
JSA10645 - 2014-09 Security Bulletin: Pulse Connect Secure (PSC) and Pulse Policy Secure (PPS): Cross site scripting issue (CVE-2014-3820)
Last Modified Date Aug 24, 2026 12:34:43 AM...
SA40208 - [Pulse Secure] Single specific file content disclosure issue (CVE-2016-4788)
Last Modified Date Aug 24, 2026 12:35:16 AM...
SA40212 - [Pulse Secure] Sign in page disclosure issue (CVE-2016-4792)
Last Modified Date Aug 24, 2026 12:35:14 AM...
JSA10399 - Security Vulnerability in Pulse Policy Secure (PPS) software's radius authentication mechanism
Last Modified Date Aug 24, 2026 12:35:04 AM...
SA43681 - 2016-11: CSRF vulnerability with Brocade Virtual Traffic Manager (vTM) (CVE-2016-8201)
Last Modified Date Aug 24, 2026 12:34:34 AM...
SA44114 - 2019-04: Out-of-Cycle Advisory: Pulse Desktop Client and Network Connect improper handling of session cookies (CVE-2019-11213)
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Under certain conditions, the Pulse Desktop Client and Network Connect could allow an attacker to access session tokens to replay and spoof sessions, and as a result, gain unauthorized...
SA44426 - 2020-04: Out-of-Cycle Advisory: Multiple Host Checker Vulnerabilities
Last Modified Date Aug 24, 2026 12:35:11 AM...
Urgent Reminder to Update Edge Appliances During Peak Holiday Time-off
Last Modified Date Aug 23, 2026 10:03:11 PM...
September Security Advisory Ivanti Connect Secure, Policy Secure, ZTA Gateways and Neurons for Secure Access (Multiple CVEs)
Update 10 Sept Ivanti Policy Secure: Affected and Resolved in Versions updated Summary Ivanti has released updates for Ivanti Connect Secure, Policy Secure, ZTA Gateways and Neurons for Secure Access which addresses six medium and five high vulnerabilities. We are not aware of any customers being...
Security Advisory Ivanti Neurons for ITSM (On-Premises Only) (CVE-2025-22462)
Security Advisory Ivanti Neurons for ITSM on-premises only CVE-2025-22462 Summary Ivanti has released updates for Ivanti Neurons for ITSM on-prem only which addresses one critical severity vulnerability. Depending on system configuration, successful exploitation could allow an unauthenticated...
Security Advisory EPMM May 2024
Created Date May 15, 2024 8:38:38 PM...
Security Patch Release - Ivanti Policy Secure 22.6R1
Last Modified Date Aug 23, 2026 9:54:42 PM...
CVE-2023-39335 - Certificate creation authentication bypass in UPDATEPROFILE handler
Created Date Nov 9, 2023 4:55:50 PM...