288 matches found
SA44101 - 2019-04: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.0RX
Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Multiple vulnerabilities were discovered and have been resolved in Pulse Connect Secure PCS and Pulse Policy Secure PPS. This includes an authentication by-pass vulnerability that can...
SA44426 - 2020-04: Out-of-Cycle Advisory: Multiple Host Checker Vulnerabilities
Last Modified Date Aug 24, 2026 12:35:11 AM...
SA44399 - 2020-03: Out-of-Cycle Advisory: Pulse Secure recommendations for Enterprise VPN Security (AA20-073A)
Last Modified Date Aug 24, 2026 12:35:10 AM...
SA44328 - 2019-12: Out-Of-Cycle Advisory: Vulnerability Could Allow Attackers to Sniff or Hijack VPN Connections (CVE-2019-14899)
Last Modified Date Aug 23, 2026 9:03:27 PM...
2020-06: Out-of-Cycle Advisory: Pulse Secure Client TOCTOU Privilege Escalation Vulnerability (CVE-2020-13162)
Last Modified Date Aug 24, 2026 12:00:16 AM...
SA44516 - 2020-07: Security Bulletin: Multiple Vulnerabilities Resolved in Pulse Connect Secure / Pulse Policy Secure 9.1R8
Problem This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R8 and Pulse Policy Secure 9.1R8. Refer to KB43892 - What releases will Pulse Secure apply fixes to resolve security vulnerabilities? per our End of Engineering EOE and End of Life EOL...
SA40202 - [Pulse Secure] May 3rd 2016 OpenSSL Security Advisory
Last Modified Date Mar 4, 2024 7:46:08 PM...
SA44525 - 2020-07: Out-of-Cycle Advisory: Multiple Vulnerabilities in Apache Guacamole Software
Last Modified Date Aug 24, 2026 12:35:09 AM...
SA44440 - April 21 2020 OpenSSL Security Advisory
Last Modified Date Aug 24, 2026 12:35:11 AM...
SA44784 - 2021-04: Out-of-Cycle Advisory: Multiple Vulnerabilities Resolved in Pulse Connect Secure 9.1R11.4
Multiple vulnerabilities were discovered and have been resolved in Pulse Connect Secure PCS. This includes an authentication by-pass vulnerability that can allow an unauthenticated user to perform remote arbitrary file execution on the Pulse Connect Secure gateway. Many of these vulnerabilities...
SA44800 - 2021-05: Out-of-Cycle Advisory: Pulse Connect Secure Buffer Overflow Vulnerability
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A vulnerability was discovered under Pulse Connect Secure PCS. This includes buffer overflow vulnerability on the Pulse Connect Secure gateway that allows a remote authenticated user...
SA44588 - 2020-09: Out-of-Cycle Advisory: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure 9.1R8.2
Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R8.2, Pulse Policy Secure 9.1R8.2 Refer to KB43892 - What releases will Pulse Secur...
SA44574 - 2020-08: Out-of-Cycle Advisory: FBI and NSA Expose New Linux Malware Drovorub
Last Modified Date Mar 4, 2024 6:00:01 PM...
SA44790 - HTTP Request Smuggling vulnerability with Virtual Traffic Manager (vTM)
Last Modified Date Mar 4, 2024 8:03:28 PM...
SA44508 - 2020-06: Out-of-Cycle Advisory: Multiple Vulnerabilities in Treck TCP/IP Embedded Software
Last Modified Date Mar 4, 2024 5:58:50 PM...
SA44845 - OpenSSL Security Advisory CVE-2021-3450
Last Modified Date Aug 24, 2026 1:12:25 AM...
SA44601 - 2020-10: Security Bulletin: Multiple Vulnerabilities Resolved in Pulse Connect Secure / Pulse Policy Secure / Pulse Secure Desktop Client 9.1R9
Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure 9.1R9, Pulse Policy Secure 9.1R9 and Pulse Secure Desktop Client 9.1R9. Refer to KB438...
SA44676 - December 08 2020 OpenSSL Security Advisory
Last Modified Date Dec 15, 2023 5:32:46 PM...
SA45520 - CVE's (CVE-2022-35254,CVE-2022-35258) may lead to DoS attack
Summary: An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure ICS in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R3, Ivanti Policy Secure IPS in versions prior to 9.1R17 and 22.2R3, and Ivanti Neurons for Zero-Trust Gateway in...
SA45476 - Client Side Desync Attack (Informational)
Last Modified Date Aug 24, 2026 12:35:08 AM...
SA44846 - OpenSSL Security Advisory CVE-2021-23841
Last Modified Date Aug 23, 2026 11:06:07 PM...
SA45100 - CVE-2022-0778-OpenSSL-Vulnerability may lead to DoS attack
Last Modified Date Dec 15, 2023 5:27:41 PM...
SA44712 - 2021-02: Out-of-Cycle Advisory: Pulse Secure response to BIOS Trickboot Vulnerability
Last Modified Date Aug 24, 2026 12:35:09 AM...
SA45038 - CVE-2022-23852 - Expat (AKA Libexpat) Before 2.4.4 Has a Signed Integer Overflow in XML_GetBuffer, for Configurations With a Nonzero XML_CONTEXT_BYTES
Last Modified Date Aug 24, 2026 1:12:26 AM...
SA44858 - 9.1R12 Security Fixes
Last Modified Date Aug 23, 2026 11:31:29 PM...
SA44899 - CVE-2021-22965: A Vulnerability in Pulse Connect Secure Before 9.1R12.1
Last Modified Date Aug 24, 2026 1:12:26 AM...
SA45654 - Multiple OpenSSL Vulnerabilities in Layer 2 network filtering capabilities
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Multiple vulnerabilities were discovered with respect to Layer 2 network filtering capabilities such as IPv6 RA guard or ARP inspection can be bypassed using combinations of VLAN 0...
SA45470 - OpenSSL Security Advisory CVE-2021-4154
Created Date Feb 14, 2023 7:22:22 AM...
SA45653 - Cross-site Request Forgery in Login Form
Last Modified Date Aug 23, 2026 11:31:03 PM...
Impact of CVE-2023-22809 on EPMM, Sentry and Connector
Created Date Feb 10, 2023 7:30:23 AM...
Security Advisory for Ivanti Endpoint Manager Client-CVE-2022-27773
SECURITY ADVISORY 2022-11-16 Product Affected: Ivanti EPM Endpoint Manager PROBLEM: A vulnerability was recently discovered for Ivanti Endpoint Manager Client. Vulnerability InformationCVE| CVSS| Summary ---|---|--- CVE-2022-27773CVE | High - CVSS=7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | An issu...
MI Core - Vulnerability found security issue on jquery.
Created Date Jun 10, 2022 5:57:03 AM...
Are MobileIron Products Vulnerable to CVE-2021-44521--apache-cassandra
Created Date Feb 24, 2022 5:15:47 PM...
CVE-2022-0185
Last Modified Date Aug 24, 2026 12:30:52 AM...
Is Ivanti IPCM voice vulnerable to CVE-2021-44228 Java logging library (log4j)
Created Date Dec 20, 2021 2:55:48 PM...
Is HEAT Classic (HEAT Serivce and Support) vulnerable to CVE-2021-44228 Java logging library (log4j)
Created Date Dec 14, 2021 3:12:00 PM...
Security Bulletin:CVE-2021-44228: MobileIron Remote code injection in Log4j
Affected Versions --- MobileIron Core below Core 11.5 Mobileiron Sentry Sentry 9.13 and 9.14 only Core Connector All Versions Reporting Database RDB All Versions Please Note Ivanti has tested the mitigation for the vulnerability on supported versions of the product. While it may be possible to...