Product by Ivanti

    Ivanti ICS

    5 known vulnerabilities in Ivanti ICS (Ivanti), 3 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    3

    Actively exploited (KEV)

    3

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ivanti ICS (Ivanti)
    CriticalCVE-2024-21887

    Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

    In CISA KEVRansomwarealso in 3 other products

    		9.1
    CriticalCVE-2024-21893

    Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

    In CISA KEVRansomwarealso in 4 other products

    		8.2
    CriticalCVE-2023-46805

    Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

    In CISA KEVRansomwarealso in 3 other products

    		8.2
    HighCVE-2024-21888

    Ivanti ICS: Privilege Escalation

    also in 3 other products

    		8.8
    HighCVE-2024-22024

    Ivanti ICS: XML External Entity (XXE)

    also in 4 other products

    		8.3

    All products by Ivanti