Known vulnerabilities in Ivanti Policy Secure (formerly Pulse Policy Secure) - page 3

Vendor: Ivanti
Software: Ivanti Policy Secure (formerly Pulse Policy Secure)
Software CPE: cpe:2.3:a:ivanti:pulse_policy_secure:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 89
Public exploits: 10
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ivanti Policy Secure (formerly Pulse Policy Secure) Ivanti Policy Secure (formerly Pulse Policy Secure) is affected by 89 known vulnerabilities: 5 critical, 5 high, 31 medium, 48 low Critical High Medium Low

Vulnerabilities (89)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100475 - Argument Injection or Modification
CVE-2024-38655		 CWE-88 Low
No
No
 22.7R1.2 14.11.2024 SB2024111422
#VU100472 - NULL Pointer Dereference
CVE-2024-8495		 CWE-476 Medium
No
No
 22.7R1.2 14.11.2024 SB2024111422
#VU100471 - Stack-based buffer overflow
CVE-2024-47909		 CWE-121 Low
No
No
 22.7R1.2 14.11.2024 SB2024111422
#VU100468 - Untrusted Search Path
CVE-2024-47906		 CWE-426 Low
No
No
 22.7R1.2 14.11.2024 SB2024111422
#VU100465 - Stack-based buffer overflow
CVE-2024-47905		 CWE-121 Low
No
No
 22.7R1.2 14.11.2024 SB2024111422
#VU98388 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-37404		 CWE-93 Low
Available
No
 22.7R1.1 11.10.2024 SB2024101122
#VU89721 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2023-38551		 CWE-93 Low
No
No
 22.7R1 22.05.2024 SB2024052216
#VU88142 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22023		 CWE-611 Medium
No
No
 - 04.04.2024 SB2024040440
#VU88141 - Heap-based Buffer Overflow
CVE-2024-22053		 CWE-122 Medium
No
No
 - 04.04.2024 SB2024040440
#VU88140 - NULL Pointer Dereference
CVE-2024-22052		 CWE-476 Medium
No
No
 - 04.04.2024 SB2024040440
#VU88139 - Heap-based Buffer Overflow
CVE-2024-21894		 CWE-122 High
No
No
 - 04.04.2024 SB2024040440
#VU86282 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-22024		 CWE-611 High
Available
Exploited
 9.1R17.3, 9.1R18.4, 22.5R1.2 09.02.2024 SB2024020906
#VU85962 - Server-Side Request Forgery (SSRF)
CVE-2024-21893		 CWE-918 Critical
Available
Exploited
 9.1R14.4, 9.1R17.2, 9.1R18.3, 22.4R2.2, 22.5R1.1 31.01.2024 SB2024011081
#VU85961 - Permissions, Privileges, and Access Controls
CVE-2024-21888		 CWE-264 Medium
Available
No
 9.1R14.4, 9.1R17.2, 9.1R18.3, 22.4R2.2, 22.5R1.1 31.01.2024 SB2024011081
#VU85287 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21887		 CWE-78 Critical
Available
Exploited
 - 10.01.2024 SB2024011081
#VU85286 - Improper Authentication
CVE-2023-46805		 CWE-287 Critical
Available
Exploited
 - 10.01.2024 SB2024011081
#VU46998 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-8238		 CWE-79 Medium
No
No
 9.1R8.2 23.09.2020 SB2020092343
#VU46997 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8243		 CWE-94 Low
No
Exploited
 9.1R8.2 23.09.2020 SB2020092343
#VU31947 - Improper Access Control
CVE-2020-8216		 CWE-284 Low
No
No
 9.1R8 27.07.2020 SB2020072750
#VU16161 - Buffer over-read
CVE-2018-19519		 CWE-126 Low
No
No
 9.1R8 27.11.2018 SB2018112813
SB2018121711
SB2018122306
and 6 more


Showing elements 41 - 60 out of 89