← Back

Ivanti

ivanti

504 CVEs • 41 products

Products (41)

Click to collapse
Toggle
Avalanche
avalanche
Policy Secure
policy_secure
Xtraction
xtraction
Mobileiron
mobileiron
Automation
automation
Dsm Netinst
dsm_netinst
Dsm Remote
dsm_remote
Docs@work
docs@work

CVEs (504)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Ivanti
Pulsesecure
2Connect Secure
Pulse Connect Secure
May 6, 2026
May 26, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13....Show more
Cross-site scripting (XSS) vulnerability in the system configuration section in the administrative user interface in Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r9, and 7.4 before 7.4r13.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
2Ivanti
Pulsesecure
2Connect Secure
Pulse Connect Secure
May 6, 2026
May 26, 2016
N/A· v4
5.8 MEDIUM· v3
5.0 MEDIUM· v2
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read an unspecified system file via unknown vectors.
2Ivanti
Pulsesecure
2Connect Secure
Pulse Connect Secure
May 6, 2026
May 26, 2016
N/A· v4
10.0 CRITICAL· v3
6.4 MEDIUM· v2
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vecto...Show more
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r2, 8.0 before 8.0r10, and 7.4 before 7.4r13.4 allow remote attackers to read sensitive system authentication files in an unspecified directory via unknown vectors.Show less
2Ivanti
Pulsesecure
2Connect Secure
Pulse Connect Secure
May 6, 2026
May 26, 2016
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Pulse Connect Secure (PCS) 8.2 before 8.2r1, 8.1 before 8.1r3, 8.0 before 8.0r11, and 7.4 before 7.4r13.4 allow remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.