vulnerability
Ivanti Pulse Connect Secure: Security Advisory May 2024
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:A/AC:L/Au:N/C:C/I:C/A:C) | May 31, 2024 | Jun 10, 2024 | Feb 23, 2026 |
Severity
8
CVSS
(AV:A/AC:L/Au:N/C:C/I:C/A:C)
Published
May 31, 2024
Added
Jun 10, 2024
Modified
Feb 23, 2026
Description
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Solutions
pulse-secure-pulse-connect-secure-upgrade-22_0r0pulse-secure-pulse-connect-secure-upgrade-22_7r1pulse-secure-pulse-connect-secure-upgrade-9_0r0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.