Skip to content

Known vulnerabilities in Ivanti IPS

Is your version affected?

CVE Summary Score Published
CVE-2024-22024 An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy… 8.3 High Feb 13, 2024
CVE-2024-21893 Exploited Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability 8.2 High Jan 31, 2024
CVE-2024-21888 A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure… 8.8 High Jan 31, 2024
CVE-2024-21887 Exploited Ivanti Connect Secure and Policy Secure Command Injection Vulnerability 9.1 Critical Jan 12, 2024
CVE-2023-46805 Exploited Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability 8.2 High Jan 12, 2024

Other Ivanti products