Ivanti Connect Secure vulnerabilities, page 4

134 vulnerabilities

Known vulnerabilities in Ivanti Connect Secure, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.9MediumCVE-2020-8256ivanti · connect_secure +1 moreivanti connect_secureA vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Entity (XXE) vulnerability.EPSS3.36%4.3MediumCVE-2020-8261ivanti · connect_secure +3 moreivanti connect_secureA vulnerability in the Pulse Connect Secure / Pulse Policy Secure < 9.1R9 is vulnerable to arbitrary cookie injection.EPSS2.15%6.1MediumCVE-2020-8238ivanti · connect_secure +4 moreivanti connect_secureA vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS).EPSS1.74%7.2HighCVE-2020-8218ivanti · connect_secure +2 moreivanti connect_secureA code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.KEVEPSS32.25%6.1MediumCVE-2020-8262ivanti · connect_secure +3 moreivanti connect_secureA vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) and Open Redirection for authenticated user web interface.EPSS1.85%8.1HighCVE-2020-8206ivanti · connect_secure +3 moreivanti connect_secureAn improper authentication vulnerability exists in Pulse Connect Secure <9.1RB that allows an attacker with a users primary credentials to bypass the Google TOTP.EPSS2.99%7.2HighCVE-2020-8260ivanti · connect_secureivanti connect_secureA vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.KEVEPSS96.48%7.2HighCVE-2020-8243ivanti · connect_secure +1 moreivanti connect_secureA vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.KEVEPSS90.76%4.9MediumCVE-2020-8221ivanti · connect_secure +3 moreivanti connect_secureA path traversal vulnerability exists in Pulse Connect Secure <9.1R8 which allows an authenticated attacker to read arbitrary files via the administrator web interface.EPSS2.28%6.1MediumCVE-2020-8204ivanti · connect_secure +3 moreivanti connect_secureA cross site scripting (XSS) vulnerability exists in Pulse Connect Secure <9.1R5 on the PSAL Page.EPSS1.81%5.4MediumCVE-2020-8217ivanti · connect_secure +3 moreivanti connect_secureA cross site scripting (XSS) vulnerability in Pulse Connect Secure <9.1R8 allowed attackers to exploit in the URL used for Citrix ICA.EPSS1.35%6.8MediumCVE-2020-8222ivanti · connect_secure +3 moreivanti connect_secureA path traversal vulnerability exists in Pulse Connect Secure <9.1R8 that allowed an authenticated attacker via the administrator web interface to perform an arbitrary file reading vulnerability through Meeting.EPSS2.28%7.2HighCVE-2020-8219ivanti · connect_secure +3 moreivanti connect_secureAn insufficient permission check vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to change the password of a full administrator.EPSS2.22%5.4MediumCVE-2022-21826ivanti · connect_secure +1 moreivanti connect_securePulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request, it ignores the request's Content-Length header and leaves the POST body on the TCP/TLS socket. This body ends up prefixing the next HTTP request sent down that connection, this means when someone loads website attacker may be able to make browser issue a POST to the application, enabling XSS.EPSS46.02%7.5HighCVE-2022-35254ivanti · connect_secure +2 moreivanti connect_secureAn unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.EPSS2.68%7.5HighCVE-2022-35258ivanti · connect_secure +2 moreivanti connect_secureAn unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.EPSS2.68%8.8HighCVE-2017-11455ivanti · connect_secure +2 moreivanti connect_securediag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote attackers to hijack the authentication of administrators for requests to start tcpdump, related to the lack of anti-CSRF tokens.EPSS1.31%8.2HighCVE-2024-21893ivanti · connect_secure +4 moreivanti connect_secureA server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.KEVRansomwareEPSS100.00%9.1CriticalCVE-2024-21887ivanti · connect_secure +3 moreivanti connect_secureA command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.KEVRansomwareEPSS100.00%8.8HighCVE-2024-21888ivanti · connect_secure +3 moreivanti connect_secureA privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.EPSS85.42%