292 matches found
SA45654 - Multiple OpenSSL Vulnerabilities in Layer 2 network filtering capabilities
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Multiple vulnerabilities were discovered with respect to Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0...
December 2024 Security Advisory Ivanti Application Control (CVE-2024-11598)
Summary Ivanti has released updates for Ivanti Application Control which address one high severity vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CVE Number| Description| CVSS Score Severity| CVSS Vector| CW...
December 2024 Security Advisory Ivanti Workspace Control (IWC) (CVE-2024-8496)
Summary Ivanti has released updates for Workspace Control which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CV...
CVE-2024-21888 Privilege Escalation for Ivanti Connect Secure and Ivanti Policy Secure
DESCRIPTION: As part of our ongoing investigation into the vulnerabilities reported on 10 January in Ivanti Connect Secure, Ivanti Policy Secure and ZTA gateways, we have discovered new vulnerabilities. These vulnerabilities impact all supported versions – Version 9.x and 22.x refer to Granular...
SA-2023-08-08-CVE-2023-35083
SECURITY ADVISORY 08-08-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for EPM 2022 SU3 and all previous versions. We have a Hotfix available to remediate this vulnerability that can be found by going to CVE-2023-35083 Full details. Please log into the...
SA-2023-07-26-CVE-2023-28129
SECURITY ADVISORY 07-26-2023 Product Affected: Ivanti Desktop and Server Management A vulnerability was recently discovered in DSM 2022.1 Service Update 1. This vulnerability is remediated in DSM 2022.2 Service Update 3. Vulnerability Information CVE | CVSS | Summary | Product Affected...
JSA10471 - Out of Cycle Security Bulletin: Pulse Connect Secure (PCS) Network Connect Credential Provider Issue
Last Modified Date Aug 24, 2026 12:35:29 AM...
JSA10554 - 2013-03: Security Bulletin: Pulse Connect Secure (PCS): Multiple cross site scripting issues
Last Modified Date Aug 24, 2026 12:35:00 AM...
JSA10415 - Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) products - Security Bundle - Client Issues
Last Modified Date Aug 23, 2026 9:03:24 PM...
JSA10488 - 2011-09 Security Bulletin: Pulse Connect Secure (PCS) & Pulse Policy Secure (PPS): Admin Interface Issue
Last Modified Date Mar 4, 2024 7:29:03 PM...
JSA10385 - Certain crafted packets can crash Steel-Belted Radius or hijack the server machine.
Last Modified Date Mar 10, 2023 8:08:40 AM...
JSA10412 - VU#261869 - Clientless PCS products break web browser's domain-based security models
Last Modified Date Aug 24, 2026 12:34:58 AM...
SA40054 - 2015-09: Security Advisory: Secure Meeting (Pulse Collaboration) issue may allow authenticated users to bypass meeting authorization (CVE-2015-7323)
Last Modified Date Mar 4, 2024 5:26:29 PM...
JSA10646 - 2014-09 Security Bulletin: Junos Pulse Secure Access Service (SSL VPN): Cross site scripting issue (CVE-2014-3824)
Last Modified Date Aug 24, 2026 12:35:25 AM...
SA40662 - Pulse Workspace data exposure
Last Modified Date Aug 24, 2026 2:08:27 AM...
SA43620 - 2018-01 Out-Of-Cycle Advisory : Pulse Secure Desktop Linux Client - SSL Certificate Validation Issue
Last Modified Date Aug 24, 2026 12:35:13 AM...
SA43018 - 2018-01 Out-Of-Cycle Advisory: Pulse Connect Secure (PCS) / Pulse Policy Secure (PPS): Cross Site Scripting Issue
Last Modified Date Mar 4, 2024 7:52:02 PM...
SA44525 - 2020-07: Out-of-Cycle Advisory: Multiple Vulnerabilities in Apache Guacamole Software
Last Modified Date Aug 24, 2026 12:35:09 AM...
SA44399 - 2020-03: Out-of-Cycle Advisory: Pulse Secure recommendations for Enterprise VPN Security (AA20-073A)
Last Modified Date Aug 24, 2026 12:35:10 AM...
Security Alert - CVE's Addressed in Avalanche 6.3.3
Last Modified Date Dec 10, 2021 8:13:44 AM...
December 2024 Security Advisory Ivanti Performance Manager (CVE-2024-11597)
Summary Ivanti has released updates for Performance Manager which address one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CV...
Security Advisory Ivanti Patch SDK (CVE-2024-10256)
Summary Ivanti has released updates for Ivanti Patch SDK which addresses a high severity vulnerability. Successful exploitation could lead to local arbitrary file deletion. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. NOTE: This article has be...
CVE-2023-39338 - Authenticated user access protected Sentry service vulnerability
Created Date Nov 9, 2023 4:55:32 PM...
Samsung Email app security patch for CWE-297
Created Date Sep 15, 2023 7:06:21 AM...
JSA10553 - 2013-03: Security Bulletin: Pulse Secure Mobile: Android client privilege escalation
Last Modified Date Aug 24, 2026 12:34:47 AM...
JSA10589 - 2013-09 Security Bulletin: Pulse Connect Secure (PCS): Multiple cross site scripting issues
Last Modified Date Aug 24, 2026 12:35:00 AM...
JSA10400 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) products - SSL-VPN Security Bundle - Admin Issues
Last Modified Date Aug 24, 2026 12:35:04 AM...
JSA10490 - 2011-09 Security Bulletin: Pulse Connect Secure (PCS): Cross Site Scripting Issues
Last Modified Date Aug 24, 2026 12:35:00 AM...
JSA10414 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) - Security Bundle - Admin Issue
Last Modified Date Mar 4, 2024 6:56:46 PM...
JSA10443 - 2010-06 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Connecting to untrusted PCS or PPS
Last Modified Date Mar 4, 2024 6:59:05 PM...
JSA10325 - CERT-CSA Option Vulnerability, Released 3/10/03
Last Modified Date Aug 24, 2026 12:35:39 AM...
JSA10326 - PCS 2.2 Cross-Scripting Alert, Released 10/23/02
Last Modified Date Aug 24, 2026 12:35:34 AM...
JSA10413 - Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) products - Security Bundle - Authentication & Authorization Issue
Last Modified Date Aug 24, 2026 12:34:58 AM...
SA40145 - [Pulse Secure] January 28th 2016 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:35:19 AM...
SA40206 - [Pulse Secure] Denial of service issue possible (CVE-2016-4786)
Last Modified Date Mar 4, 2024 5:37:40 PM...
SA40207 - [Pulse Secure] File content disclosure issue (CVE-2016-4787)
Last Modified Date Aug 24, 2026 12:35:17 AM...
SA43582 - Out-of-Cycle Advisory: Virtual Traffic Manager (vTM) Password Management Vulnerability/Sensitive Data Protection Vulnerability/Principle Of Least Privilege Violation
Last Modified Date Aug 24, 2026 12:34:34 AM...
SA44328 - 2019-12: Out-Of-Cycle Advisory: Vulnerability Could Allow Attackers to Sniff or Hijack VPN Connections (CVE-2019-14899)
Last Modified Date Aug 23, 2026 9:03:27 PM...
SA44712 - 2021-02: Out-of-Cycle Advisory: Pulse Secure response to BIOS Trickboot Vulnerability
Last Modified Date Aug 24, 2026 12:35:09 AM...
SA45653 - Cross-site Request Forgery in Login Form
Last Modified Date Aug 23, 2026 11:31:03 PM...
EPMM: Impact of CVE-2026-55956 On EPMM And Sentry
Created Date Jul 15, 2026 9:18:40 AM...
Security Advisory Ivanti Endpoint Manager for Mobile (EPMM) July 2024
Created Date Jul 17, 2024 2:08:45 PM...
SA-2023-06-20-CVE-2023-28323
SECURITY ADVISORY 06-20-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for EPM 2022 SU3 and all previous versions. We have a Hotfix available to remediate this vulnerability that can be found by going to CVE-2023-28323 Full details . Please log into the...
Avalanche ZDI-CAN-19513 Security Advisory
Last Modified Date Apr 3, 2023 8:41:48 PM...
JSA10350 - Optimistic TCP acknowledgements can cause denial of service (CERT/CC VU#102014)
Last Modified Date Aug 24, 2026 12:35:35 AM...
JSA10462 - Cross-site scripting issue with file browsing upload page
Last Modified Date Aug 24, 2026 2:17:07 AM...
JSA10511 - 2012-06 Security Bulletin: Pulse Connect Secure (PCS): Cross site scripting issue
Last Modified Date Aug 24, 2026 12:35:02 AM...
JSA10497 - 2012-09: Security, Access, and Acceleration: Security Advisories Released
Last Modified Date Aug 24, 2026 12:34:48 AM...