Lucene search
+L
IvantiMost viewed

288 matches found

Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

JSA10399 - Security Vulnerability in Pulse Policy Secure (PPS) software's radius authentication mechanism

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This Security Advisory is an addendum to JSA10380.. The purpose is to notify customers of the removal of the affected releases from the Pulse Secure software download site. JSA10380 -...

7.2AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

SA43681 - 2016-11: CSRF vulnerability with Brocade Virtual Traffic Manager (vTM) (CVE-2016-8201)

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A CSRF vulnerability in Pulse Secure Virtual Traffic Manager versions released prior to and including 11.0, could allow an attacker to trick a logged-in user into making administrative...

8CVSS6.7AI score0.00466EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

SA43877 - 2018-08 Security Bulletin: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure / Pulse Secure Desktop 9.0R1/9.0R2

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure and Pulse Policy Secure 9.0R1 & Pulse Desktop Client 9.0R2 releases. These issues app...

9.8CVSS6.9AI score0.04079EPSS
SaveExploits2
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

SA44114 - 2019-04: Out-of-Cycle Advisory: Pulse Desktop Client and Network Connect improper handling of session cookies (CVE-2019-11213)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Under certain conditions, the Pulse Desktop Client and Network Connect could allow an attacker to access session tokens to replay and spoof sessions, and as a result, gain unauthorized...

8.1CVSS6.8AI score0.02822EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

2020-06: Out-of-Cycle Advisory: Pulse Secure Client TOCTOU Privilege Escalation Vulnerability (CVE-2020-13162)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A security vulnerability was discovered within a Pulse Secure client-side component Windows OS only. This is a client-side exploit only and does not affect the PCS or PPS gateway serve...

7CVSS6.5AI score0.00793EPSS
SaveExploits3
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.14 views

SA44845 - OpenSSL Security Advisory CVE-2021-3450

On March 25 2021, the OpenSSL project announced a new security advisory. These issues may affect Pulse Secure product. Refer to KB43892 - What releases will Pulse Secure apply fixes to resolve security vulnerabilities per our End of Engineering EOE and End of Life EOL policies. The OpenSSL adviso...

7.4CVSS7.2AI score0.62906EPSS
SaveExploits4
Ivanti
Ivanti
added 2025/07/30 6:29 p.m.13 views

Security Advisory Ivanti Avalanche (CVE-2025-8296, CVE-2025-8297) 

Summary Ivanti has released updates for Ivanti Avalanche which addresses two high severity vulnerabilities. Successful exploitation could lead to authenticated remote code execution. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerabilit...

7.2CVSS9.2AI score0.0122EPSS
SaveExploits0
Ivanti
Ivanti
added 2025/01/14 2:56 p.m.13 views

Security Advisory - Ivanti Application Control Engine (CVE-2024-10630)

Summary Ivanti has released updates for Ivanti Application Control Engine which address a high severity vulnerability. Successful exploitation could lead to bypassing configured protections. We are not aware of any customers being exploited by this vulnerability at the time of disclosure...

7.8CVSS6.5AI score0.00227EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/12/10 6:33 p.m.13 views

Security Advisory Ivanti Desktop and Server Management (DSM) (CVE-2024-7572)

Summary Ivanti has released updates for Ivanti Desktop and Server Management which addresses one high severity vulnerability. Successful exploitation could lead to local arbitrary file deletion. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure...

7.1CVSS7AI score0.00204EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/12/10 5:55 p.m.13 views

December 2024 Security Advisory Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) (Multiple CVEs)

Ivanti has released updates for Ivanti Connect Secure and Ivanti Policy Secure which addresses high and critical severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability Details: Important: Unless the CVE...

9.1CVSS8.9AI score0.01847EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/07/12 8:17 a.m.13 views

SA-2024-07-12-CVE-2024-29213

SECURITY ADVISORY 07-12-2024 Product Affected: Ivanti Desktop and Server Management A vulnerability was recently discovered in DSM. This vulnerability is remediated in DSM 2024.2. Vulnerability Information CVE | CVSS | Summary | Product Affected ---|---|---|--- CVE-2024-29213 CVE Reserved | 7.8...

7.8CVSS6.7AI score0.00225EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/05/15 8:38 p.m.13 views

Security Advisory EPMM May 2024

Last Modified Date Jul 19, 2024 3:00:43 PM...

5.2AI score
SaveExploits0
Ivanti
Ivanti
added 2024/03/18 4:54 p.m.13 views

CVE-2023-41724 (Remote Code Execution) for Ivanti Standalone Sentry

A new vulnerability has been discovered in the Ivanti Standalone Sentry and patches remediating this vulnerability are available now. This vulnerability impacts all supported versions 9.17.0, 9.18.0, and 9.19.0. Older versions are also at risk. There is a patch available now via the standard...

9.6CVSS7.4AI score0.12844EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/03/01 9:41 a.m.13 views

[CVE-2024-1597] PostgreSQL - Mobileiron line products (Ivanti EPMM Reporting DB, Ivanti N-MDM/Cloud)

Last Modified Date Mar 8, 2024 9:01:56 PM...

10CVSS7.2AI score0.0481EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/01/22 10:07 p.m.13 views

CVE-2024-21888 Privilege Escalation for Ivanti Connect Secure and Ivanti Policy Secure 

DESCRIPTION: As part of our ongoing investigation into the vulnerabilities reported on 10 January in Ivanti Connect Secure, Ivanti Policy Secure and ZTA gateways, we have discovered new vulnerabilities. These vulnerabilities impact all supported versions – Version 9.x and 22.x refer to Granular...

8.8CVSS10AI score0.99999EPSS
SaveExploits7
Ivanti
Ivanti
added 2023/12/04 8:39 p.m.13 views

Security Patch Release - Ivanti Policy Secure 22.6R1

Resolutions for Ivanti Policy Secure Security Issues: As part of Ivanti's commitment to continuous security hardening, Ivanti has released a security update for Ivanti Policy Secure. This update resolves a moderate vulnerability. To our knowledge, none of the CVEs identified in this review have...

4.9CVSS5.5AI score0.00945EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/11/09 4:55 p.m.13 views

CVE-2023-39337 - MobileConfig profile download authentication bypass

Last Modified Date Dec 11, 2023 2:11:27 PM...

9.1CVSS7.6AI score0.01897EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/10/04 4:22 p.m.13 views

SA-2023-08-08-CVE-2023-35084

SECURITY ADVISORY 08-08-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for EPM 2022 SU3 and all previous versions. We have a Hotfix available to remediate this vulnerability that can be found by going to CVE-2023-35084 Full details. Please log into the...

9.8CVSS6.4AI score0.02848EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/10/04 4:13 p.m.13 views

SA-2023-08-08-CVE-2023-35083

SECURITY ADVISORY 08-08-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for EPM 2022 SU3 and all previous versions. We have a Hotfix available to remediate this vulnerability that can be found by going to CVE-2023-35083 Full details. Please log into the...

6.5CVSS9.5AI score0.01091EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/06/07 7:55 p.m.13 views

SA-2023-06-06-CVE-2023-28324

SECURITY ADVISORY 06-06-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for Ivanti Endpoint Manager for all versions of 2022 SU2 and below. Please patch to the latest version of EPM 2022. If you are using 2021.1, please patch to SU4 and apply the hotfix as...

9.8CVSS7.9AI score0.12904EPSS
SaveExploits5
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

JSA10571 - 2013-06 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Internal and test Certificate Authority Root Servers unintentionally added to Trusted CA list

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. The Pulse Connect Secure PCS and Pulse Policy Secure PPS software use Trusted Server CA Root Certificate list in order to verify the validity of certificates. Internal and development...

4.3CVSS7AI score0.00488EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

JSA10402 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - Multiple Web-based CGI and Cross Site Scripting (XSS) vulnerabilities.

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. CGI and Cross Site Scripting vulnerabilities found and fixed through a combination of internal and external proactive security testing: - Internal path was displayed in some error...

6.5AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

JSA10616 - 2014-03 Security Bulletin: Pulse Connect Secure (PCS): Linux Network Connect client local user privilege escalation issue (CVE-2014-2292)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A privilege escalation issue has been found and corrected in the Linux Network Connect client. This issue could allow a non-root user to escalate their access to root privileges on a...

7.2CVSS7.2AI score0.00387EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

JSA10414 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - Security Bundle - Admin Issue

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Admin vulnerability found and fixed through a combination of internal and external proactive security testing: - When an admin uses certain sub-menus within the console, a timeout is...

7.2AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

JSA10412 - VU#261869 - Clientless PCS products break web browser's domain-based security models

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Clientless PCS products from multiple vendors operate in a way that breaks fundamental browser security mechanisms. An attacker could use these devices to bypass authentication or...

7.4AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

JSA10647 - 2014-09 Security Bulletin: Junos Pulse Secure Access Service (SSL VPN): Clickjacking issue (CVE-2014-3823)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A clickjacking issue has been found in the Pulse Connect Secure product. 'X-Frame-Options' has been added to defend against this type of attack. The attack could take place against...

4.3CVSS6.4AI score0.00958EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

SA44676 - December 08 2020 OpenSSL Security Advisory

Problem On December 08 2020, the OpenSSL project announced a new security advisory. These issues may affect Pulse Secure product. Refer to KB43892 - What releases will Pulse Secure apply fixes to resolve security vulnerabilities? per our End of Engineering EOE and End of Life EOL policies. The...

5.9CVSS7AI score0.06968EPSS
SaveExploits3
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

SA44846 - OpenSSL Security Advisory CVE-2021-23841

On February 16 2021, the OpenSSL project announced a new security advisory. These issues may affect Pulse Secure product. Refer to KB43892 - What releases will Pulse Secure apply fixes to resolve security vulnerabilities per our End of Engineering EOE and End of Life EOL policies. The OpenSSL...

7.5CVSS7.3AI score0.50732EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.13 views

SA44712 - 2021-02: Out-of-Cycle Advisory: Pulse Secure response to BIOS Trickboot Vulnerability

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A vulnerability in the BIOS of Pulse Secure PSA-Series Hardware could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain...

2.3CVSS6.8AI score0.00249EPSS
SaveExploits0
Ivanti
Ivanti
added 2026/08/11 1:58 p.m.12 views

Security Advisory Ivanti Endpoint Manager (EPM) August 2026

Security Advisory Ivanti Endpoint Manager Multiple CVEs Summary: Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses three high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...

8.1CVSS5.9AI score0.00871EPSS
SaveExploits0
Ivanti
Ivanti
added 2025/11/10 4:30 p.m.12 views

Security Advisory EPM November 2025 for EPM 2024

Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses three high vulnerabilities. Successful exploitation could allow a local authenticated attacker to write arbitrary files anywhere on disk. Two of the resolved vulnerabilities, CVE-2025-9713 and CVE-2025-11622, were...

7.8CVSS7AI score0.00754EPSS
SaveExploits0
Ivanti
Ivanti
added 2025/09/09 1:39 p.m.12 views

Security Advisory September 2025 for Ivanti EPM 2024 SU3 and EPM 2022 SU8

Security Advisory Ivanti Endpoint Manager CVE-2025-9712, CVE-2025-9872 Summary Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure...

8.8CVSS7.8AI score0.20531EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/12/10 5:51 p.m.12 views

Security Advisory Ivanti Patch SDK (CVE-2024-10256)

Summary Ivanti has released updates for Ivanti Patch SDK which addresses a high severity vulnerability. Successful exploitation could lead to local arbitrary file deletion. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. NOTE: This article has be...

7.1CVSS6.8AI score0.00209EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/12/10 10:49 a.m.12 views

December 2024 Security Advisory Ivanti Application Control (CVE-2024-11598)

Summary Ivanti has released updates for Ivanti Application Control which address one high severity vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CVE Number| Description| CVSS Score Severity| CVSS Vector| CW...

7.8CVSS6.6AI score0.0021EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/12/10 9:43 a.m.12 views

December 2024 Security Advisory Ivanti Workspace Control (IWC) (CVE-2024-8496)

Summary Ivanti has released updates for Workspace Control which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CV...

7.8CVSS6.4AI score0.0021EPSS
SaveExploits0
Ivanti
Ivanti
added 2024/07/12 8:18 a.m.12 views

SA-2024-07-12-CVE-2024-29821

SECURITY ADVISORY 07-12-2024 Product Affected: Ivanti Desktop and Server Management A vulnerability was recently discovered in DSM. This vulnerability is remediated in DSM 2024.2. Vulnerability Information CVE | CVSS | Summary | Product Affected ---|---|---|--- CVE-2024-29821 CVE Reserved | 7.8...

7.8CVSS6.7AI score0.00225EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

JSA10628 - 2014-06 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Weak SSL cipher allowed unexpectedly when higher level cipher group is configured (CVE-2014-3812)

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A weak cipher issue has been discovered on the Pulse Connect Secure PCS and Pulse Policy Secure PPS devices. When configuring the device to use a higher level cipher setting, a lower...

5CVSS6.7AI score0.00745EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

JSA10602 - 2013-12 Security Bulletin: Pulse Connect Secure (PCS): Cross site scripting issue (CVE-2013-6956)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A cross site scripting issue has been found in Pulse Connect Secure PCS. The problem is a result of incorrect user input validation on the PCS web server. The issue exists within a fil...

2.1CVSS6AI score0.00931EPSS
SaveExploits1
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

JSA10488 - 2011-09 Security Bulletin: Pulse Connect Secure (PCS) & Pulse Policy Secure (PPS): Admin Interface Issue

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Custom Sign-In page upload requires additional validation. The following software releases have a fix for this issue: PCS: 6.5R9; 7.0R5, 7.1R2 or higher. PPS: 4.1R2 or higher. We...

7.2AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

JSA10443 - 2010-06 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Connecting to untrusted PCS or PPS

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. PCS and PPS use ActiveX controls or Java applets to install and launch client software from a web browser. Due to the inherent problems with using ActiveX and Java applet, users can...

7.2AI score
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

SA40054 - 2015-09: Security Advisory: Secure Meeting (Pulse Collaboration) issue may allow authenticated users to bypass meeting authorization (CVE-2015-7323)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. An authorization bypass issue has been discovered in Secure Meeting Pulse Collaboration. This issue could allow an authenticated user to log into meetings that they do not have...

3.5CVSS6.3AI score0.01656EPSS
SaveExploits3
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

JSA10646 - 2014-09 Security Bulletin: Junos Pulse Secure Access Service (SSL VPN): Cross site scripting issue (CVE-2014-3824)

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A cross site scripting issue has been found in the Pulse Connect Secure product. The problem is a result of incorrect user input validation on the SSL VPN web server. The issue exists...

4.3CVSS5.7AI score0.00931EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

SA40004 - [Pulse Secure] TLS connection verification issue (CVE-2015-5369)

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. On Pulse Connect Secure PCS that offer Hardware Acceleration PSC6000, PCS6500, MAG PSC360 and enabled, then TLS connections may be vulnerable to a protocol handshake vulnerability. This...

4.3CVSS6.9AI score0.01751EPSS
SaveExploits1
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

SA40145 - [Pulse Secure] January 28th 2016 OpenSSL Security Advisory

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. On January 28th 2016 the OpenSSL project announced two new security advisories. The OpenSSL advisory can be found at the following link: https://www.openssl.org/news/secadv/20160128.tx...

5.9CVSS7AI score0.83645EPSS
SaveExploits2
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

SA44328 - 2019-12: Out-Of-Cycle Advisory: Vulnerability Could Allow Attackers to Sniff or Hijack VPN Connections (CVE-2019-14899)

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about recently discovered vulnerability CVE-2019-14899. The flaw could be exploited by an attacker who shares the same network segment with the target...

7.4CVSS8AI score0.00838EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

SA44525 - 2020-07: Out-of-Cycle Advisory: Multiple Vulnerabilities in Apache Guacamole Software

Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about the Apache Guacamole HTML5 Access vulnerabilities highlighted in CVE-2020-9498 and CVE-2020-9497. If a end user connects to a malicious or...

6.7CVSS7AI score0.00795EPSS
SaveExploits0
Ivanti
Ivanti
added 2023/02/14 7:22 a.m.12 views

SA44899 - CVE-2021-22965: A Vulnerability in Pulse Connect Secure Before 9.1R12.1

Prior to 9.1R12.1 System Software, a vulnerability in the Pulse Secure server exists where malformed packets can, be used for Denial of Service. The impact and temporary mitigation is referenced in KB44879 CVE| ScoreCVSS:3.0| Vector| Description| Affected Versions ---|---|---|---|---...

7.8CVSS6.7AI score0.02123EPSS
SaveExploits0
Ivanti
Ivanti
added 2022/11/17 3:28 p.m.12 views

Security Advisory for Ivanti Endpoint Manager Client-CVE-2022-27773

SECURITY ADVISORY 2022-11-16 Product Affected: Ivanti EPM Endpoint Manager PROBLEM: A vulnerability was recently discovered for Ivanti Endpoint Manager Client. Vulnerability InformationCVE| CVSS| Summary ---|---|--- CVE-2022-27773CVE | High - CVSS=7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | An issu...

9.8CVSS7.2AI score0.02585EPSS
SaveExploits0
Ivanti
Ivanti
added 2022/06/10 5:57 a.m.12 views

MI Core - Vulnerability found security issue on jquery.

Last Modified Date Mar 12, 2024 4:32:15 PM...

5.2AI score
SaveExploits0
Ivanti
Ivanti
added 2022/02/24 5:15 p.m.12 views

Are MobileIron Products Vulnerable to CVE-2021-44521--apache-cassandra

Last Modified Date Mar 8, 2024 7:55:33 PM...

9.1CVSS8AI score0.55006EPSS
SaveExploits7
Total number of security vulnerabilities288