Advisories · Technology
Ivanti Neurons for Secure Access.
Every CVE that names Ivanti Neurons for Secure Access among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Missing authorization in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Broken access control
- CVSS 6.1 Medium
Cross-site scripting in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Cross-site scripting (XSS)
- CVSS 8.8 High
Missing authorization in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Broken access control
- CVSS 8.8 High
Missing authorization in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Broken access control
- CVSS 6.8 Medium
Server-side request forgery in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Missing authorization in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Broken access control
- CVSS 8.8 High
Cross-site request forgery in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Cross-site request forgery (CSRF)
- CVSS 4.9 Medium
Unchecked return value in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-252
- CVSS 8.9 High
Missing authorization in Ivanti Connect Secure 22.7R2.9 and others
- Ivanti Connect Secure 22.7R2.9
- Ivanti Policy Secure
- Broken access control
- CVSS 5.4 Medium
Missing authorization in Ivanti Connect Secure before and others
- Ivanti Connect Secure before
- Ivanti Policy Secure
- Broken access control
- CVSS 5.5 Medium
Ivanti Connect Secure: Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or…
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-61
- CVSS 4.9 Medium
XML entity expansion in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Denial of service
- CVSS 7.5 High
Heap-based buffer overflow in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Memory corruption