292 matches found
SA45520 - CVE's (CVE-2022-35254,CVE-2022-35258) may lead to DoS attack
Summary: An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R3, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.2R3, and Ivanti Neurons for Zero-Trust Gateway in...
Security Advisory for Ivanti Endpoint Manager Client-CVE-2022-27773
SECURITY ADVISORY 2022-11-16 Product Affected: Ivanti EPM Endpoint Manager PROBLEM: A vulnerability was recently discovered for Ivanti Endpoint Manager Client. Vulnerability InformationCVE| CVSS| Summary ---|---|--- CVE-2022-27773CVE | High - CVSS=7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | An issu...
EPMM: Impact Of CVE-2026-55957 On EPMM and Sentry
Created Date Jul 15, 2026 9:17:17 AM...
Security Advisory EPM December 2025 for EPM 2024
Summary: Ivanti has released an update for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities and one critical severity vulnerability in the EPM core and remote consoles. We are not aware of any customers being exploited by these vulnerabilities at the time of...
Security Advisory Ivanti CSA 4.6 (Cloud Services Appliance) (CVE-2024-8963)
Summary Ivanti is disclosing a critical vulnerability in Ivanti CSA 4.6 which was incidentally addressed in the patch released on 10 September CSA 4.6 Patch 519. Successful exploitation could allow a remote unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in...
Avalanche Vulnerabilities Addressed in 6.4.1
Securtiy Advisory for Avalanche 6.4 and older. To resolve these vulnerabilities, please upgrade to Avalanche 6.4.1.207 Download Page: https://www.wavelink.com/Download-AvalancheMobile-Device-Management-Software/ Release Notes:...
CVE-2023-35081 - Remote Arbitrary File Write
Last Modified Date Aug 3, 2023 2:34:52 PM...
SA-2023-06-06-CVE-2023-28324
SECURITY ADVISORY 06-06-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for Ivanti Endpoint Manager for all versions of 2022 SU2 and below. Please patch to the latest version of EPM 2022. If you are using 2021.1, please patch to SU4 and apply the hotfix as...
JSA10602 - 2013-12 Security Bulletin: Pulse Connect Secure (PCS): Cross site scripting issue (CVE-2013-6956)
Last Modified Date Aug 24, 2026 12:34:59 AM...
JSA10401 - Pulse Connect Secure (PCS) product - PCS Security Bundle - Internal System Function
Last Modified Date Aug 24, 2026 12:34:59 AM...
SA40013 - TLS/SSL Renegotiation Vulnerability Pulse Connect Secure (PCS) (CVE-2009-3555) (Pulse Secure PSN-2009-11-573
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. The industry-wide TLS/SSL renegotiation issue CVE-2009-3555 has been found in the Pulse Connect Secure PCS device. This issue has been reported as a man in the middle MITM attack by ma...
SA40053 - 2015-09: Security Advisory: Secure Meeting (Pulse Collaboration) information disclosure vulnerability (CVE-2015-7322)
Last Modified Date Aug 24, 2026 12:35:23 AM...
SA40211 - [Pulse Secure] Cross site scripting issue (CVE-2016-4790)
Last Modified Date Aug 24, 2026 12:35:15 AM...
SA40384 - November 11, 2016 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:34:39 AM...
SA40971 - Pulse One On-Premise Remote Information Disclosure Vulnerability
Last Modified Date Aug 24, 2026 12:35:13 AM...
SA44790 - HTTP Request Smuggling vulnerability with Virtual Traffic Manager (vTM)
Last Modified Date Mar 4, 2024 8:03:28 PM...
SA44845 - OpenSSL Security Advisory CVE-2021-3450
Last Modified Date Aug 24, 2026 1:12:25 AM...
SA44588 - 2020-09: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.1R8.2
Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R8.2, Pulse Policy Secure 9.1R8.2 Refer to KB43892 - What releases will Pulse Secur...
SA44899 - CVE-2021-22965: A Vulnerability in Pulse Connect Secure Before 9.1R12.1
Last Modified Date Aug 24, 2026 1:12:26 AM...
Security Advisory Endpoint Manager Mobile (EPMM) 10/2025 (Multiple CVEs)
Security Advisory Endpoint Manager Mobile EPMM Multiple CVEs Summary Ivanti has released updates for EPMM which addresses one medium and three high severity vulnerabilities. Successful exploitation requires authentication and could lead to remote code execution. We are not aware of any customers...
October 2025 Security Advisory Ivanti Neurons for MDM
Summary Ivanti has released updates for Ivanti Neurons for MDM which addresses one medium and two high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability Details Description | CVSS Score Severity | CVSS...
Impact of CVE-2025-26465 and CVE-2025-26466 on EPMM, Sentry and Connector
Created Date Feb 26, 2025 3:04:42 PM...
Security Advisory - Ivanti Application Control Engine (CVE-2024-10630)
Summary Ivanti has released updates for Ivanti Application Control Engine which address a high severity vulnerability. Successful exploitation could lead to bypassing configured protections. We are not aware of any customers being exploited by this vulnerability at the time of disclosure...
JSA10571 - 2013-06 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Internal and test Certificate Authority Root Servers unintentionally added to Trusted CA list
Last Modified Date Aug 24, 2026 12:34:46 AM...
JSA10590 - 2013-09 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Crafted packet can cause denial of service
Last Modified Date Aug 24, 2026 12:34:46 AM...
JSA10402 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - Multiple Web-based CGI and Cross Site Scripting (XSS) vulnerabilities.
Last Modified Date Aug 24, 2026 12:34:58 AM...
JSA10482 - 2011-07 Out of Cycle Security Bulletin: Multiple Products; TLS/SSL Renegotiation Vulnerability (CVE-2009-3555)
Last Modified Date Aug 24, 2026 12:34:49 AM...
JSA10616 - 2014-03 Security Bulletin: Pulse Connect Secure (PCS): Linux Network Connect client local user privilege escalation issue (CVE-2014-2292)
Last Modified Date Aug 24, 2026 12:35:25 AM...
JSA10379 - Security Vulnerability in Pulse Connect Secue (PCS) RADIUS authentication mechanism
Last Modified Date Aug 24, 2026 12:35:30 AM...
JSA10617 - 2014-03 Security Bulletin: Pulse Connect Secure: Cross site scripting issue (CVE-2014-2291)
Last Modified Date Aug 24, 2026 12:34:44 AM...
SA40004 - [Pulse Secure] TLS connection verification issue (CVE-2015-5369)
Last Modified Date Aug 24, 2026 12:34:42 AM...
SA43681 - 2016-11: CSRF vulnerability with Brocade Virtual Traffic Manager (vTM) (CVE-2016-8201)
Last Modified Date Aug 24, 2026 12:34:34 AM...
SA43604 - 2018-01 Out-of-Cycle Advisory: Stack buffer overflow Vulnerability (CVE-2018-5299)
Last Modified Date Aug 24, 2026 12:34:38 AM...
SA44846 - OpenSSL Security Advisory CVE-2021-23841
Last Modified Date Aug 23, 2026 11:06:07 PM...
MI Core - Vulnerability found security issue on jquery.
Created Date Jun 10, 2022 5:57:03 AM...
December 2024 Security Advisory Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) (Multiple CVEs)
Last Modified Date Aug 23, 2026 11:22:02 PM...
SA-2024-07-12-CVE-2024-38648
SECURITY ADVISORY 07-12-2024 Product Affected: Ivanti Desktop and Server Management A vulnerability was recently discovered in DSM. This vulnerability is remediated in DSM 2024.2. Vulnerability Information CVE | CVSS | Summary | Product Affected ---|---|---|--- CVE-2024-38648 CVE Reserved | 9.0...
SA-2024-07-12-CVE-2024-29213
SECURITY ADVISORY 07-12-2024 Product Affected: Ivanti Desktop and Server Management A vulnerability was recently discovered in DSM. This vulnerability is remediated in DSM 2024.2. Vulnerability Information CVE | CVSS | Summary | Product Affected ---|---|---|--- CVE-2024-29213 CVE Reserved | 7.8...
[CVE-2024-1597] PostgreSQL - Mobileiron line products (Ivanti EPMM Reporting DB, Ivanti N-MDM/Cloud)
Created Date Mar 1, 2024 9:41:59 AM...
SA-2023-08-08-CVE-2023-35084
SECURITY ADVISORY 08-08-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for EPM 2022 SU3 and all previous versions. We have a Hotfix available to remediate this vulnerability that can be found by going to CVE-2023-35084 Full details. Please log into the...
CVE (2023-34298) Ivanti Secure Access Client Local Privilege Escalation
Summary A logged in Windows user can leverage functionality of the Pulse Secure / Ivanti Secure Access Client or Pulse Secure Installer Service to carry out a privilege escalation on the user machine. Mitigation None Currently Related Links https://forums.ivanti.com/s/article/New-Client-Side...
JSA10453 - 2010-09 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Local Client Logging Issue
Last Modified Date Aug 24, 2026 12:34:57 AM...
JSA10470 - Pre-authentication CGI script fails to fully validate all parameters
Last Modified Date Aug 24, 2026 12:34:50 AM...
JSA10656 - 2014-10 Out of Cycle Security Bulletin: Multiple products affected by SSL POODLE vulnerability (CVE-2014-3566)
Last Modified Date Aug 24, 2026 12:35:24 AM...
JSA10428 - 2010-03 Security Bulletin: Pulse Connect Secure (PCS)- Cross site scripting issue on end user edit bookmarks page
Last Modified Date Aug 24, 2026 12:35:01 AM...
JSA10647 - 2014-09 Security Bulletin: Junos Pulse Secure Access Service (SSL VPN): Clickjacking issue (CVE-2014-3823)
Last Modified Date Aug 24, 2026 12:35:25 AM...
SA40212 - [Pulse Secure] Sign in page disclosure issue (CVE-2016-4792)
Last Modified Date Aug 24, 2026 12:35:14 AM...
SA40210 - [Pulse Secure] Information disclosure possible on admin UI (CVE-2016-4791)
Last Modified Date Aug 24, 2026 12:35:15 AM...