vulnerability
Ivanti Pulse Connect Secure: Security patch release - Ivanti Connect Secure 22.6R2 and 22.6R2.1
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
7 | (AV:L/AC:M/Au:S/C:C/I:C/A:C) | 12/14/2023 | 05/21/2024 | 03/12/2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:S/C:C/I:C/A:C)
Published
12/14/2023
Added
05/21/2024
Modified
03/12/2025
Description
A vulnerability exists on the 22x branch of Ivanti Connect Secure where an attacker can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated execution privileges on the affected system. NOTE: (There are patch versions listed in the resolution section below 22.6R2 that contain the patch)
Solution
pulse-secure-pulse-connect-secure-upgrade-22_6r2

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.