vulnerability
Ivanti Pulse Connect Secure: Security patch release - Ivanti Connect Secure 22.6R2 and 22.6R2.1
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:M/C:C/I:C/A:C) | 12/14/2023 | 05/21/2024 | 04/03/2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:M/C:C/I:C/A:C)
Published
12/14/2023
Added
05/21/2024
Modified
04/03/2025
Description
A vulnerability exists on both branches of Ivanti Connect Secure (9.1Rx and 22x) where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution. NOTE: (There are patch versions listed in the resolution section below 22.6R2 that contain the patch)
Solution
pulse-secure-pulse-connect-secure-upgrade-22_6r2
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.