Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*

part: a version: 9.1 update: r7

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductPolicy Secure (ea81dc7e-0eae-5967-b180-2ec37247da5c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22053 vulnerable 2026-06-08 06:29:33.507219 Details available
HIGH (8.2)
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain conditions read contents from memory.
Published: 2024-04-04T19:45:10.175Z
Updated: 2024-10-03T21:40:00.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22052 vulnerable 2026-06-08 06:29:33.501495 Details available
HIGH (7.5)
A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack
Published: 2024-04-04T19:45:10.169Z
Updated: 2024-10-03T21:40:23.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22023 vulnerable 2026-06-08 06:29:33.307869 Details available
MEDIUM (5.3)
An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS.
Published: 2024-04-04T19:45:10.162Z
Updated: 2024-10-03T21:38:58.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21894 vulnerable 2026-06-08 06:29:32.377276 Details available
HIGH (8.2)
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code
Published: 2024-04-04T22:16:29.330Z
Updated: 2024-10-03T21:43:40.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21893 vulnerable 2026-06-08 06:27:37.044667 Details available
HIGH (8.2)
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.
Published: 2024-01-31T17:51:35.095Z
Updated: 2025-10-21T23:05:25.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21888 vulnerable 2026-06-08 06:27:37.029179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21887 vulnerable 2026-06-08 06:27:36.990548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46805 vulnerable 2026-06-08 06:14:23.424239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35258 vulnerable 2026-06-08 05:46:04.437240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35254 vulnerable 2026-06-08 05:46:04.416565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8262 vulnerable 2026-06-08 05:27:15.455475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8261 vulnerable 2026-06-08 05:27:15.454051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8243 vulnerable 2026-06-08 05:27:15.396077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8238 vulnerable 2026-06-08 05:27:15.365247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8222 vulnerable 2026-06-08 05:27:15.305660 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8221 vulnerable 2026-06-08 05:27:15.303549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8220 vulnerable 2026-06-08 05:27:15.302233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8219 vulnerable 2026-06-08 05:27:15.300574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8218 vulnerable 2026-06-08 05:27:15.290267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8217 vulnerable 2026-06-08 05:27:15.288453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8216 vulnerable 2026-06-08 05:27:15.286561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8206 vulnerable 2026-06-08 05:27:15.236022 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8204 vulnerable 2026-06-08 05:27:15.227126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15352 vulnerable 2026-06-08 05:19:25.718167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12880 vulnerable 2026-06-08 05:17:59.516795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.