Lucene search

K

Connect Secure Security Vulnerabilities - 2023

cve
cve

CVE-2023-39340

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service (DoS) of the appliance.

7.5CVSS

7.3AI Score

0.0005EPSS

2023-12-16 02:15 AM
18
cve
cve

CVE-2023-41719

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution.

7.2CVSS

7.2AI Score

0.001EPSS

2023-12-14 02:15 AM
19
cve
cve

CVE-2023-41720

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure (ICS) appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated executio...

7.8CVSS

7AI Score

0.001EPSS

2023-12-14 02:15 AM
20