Ivanti Connect Secure 9.x / 22.x Multiple Vulnerabilities

critical Nessus Plugin ID 187908

Language:

Version 1.15 Nov 15, 2024, 3:52 PM IAVM reference Plugin Feed: 202411151552
Version 1.14 Nov 13, 2024, 3:50 PM CISA reference Plugin Feed: 202411131550
Version 1.13 Mar 12, 2024, 7:00 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:H/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:H/RL:O/RC:C") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202403121900
Version 1.12 Feb 16, 2024, 7:23 PM IAVM reference Plugin Feed: 202402161923
Version 1.11 Feb 12, 2024, 12:26 PM CVE (Added CVE-2024-22024) Plugin Feed: 202402121226
Version 1.11 Feb 16, 2024, 12:17 PM IAVM reference Plugin Feed: 202402161217
Version 1.10 Feb 9, 2024, 11:26 PM Detection (updated fixed versions) Plugin Feed: 202402092326
Version 1.9 Feb 2, 2024, 3:59 PM CISA reference CVSS metrics ("CVSSv2 score" set to 9.0. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C") CVSSv2 score source (changed from "CVE-2023-46805" to "CVE-2024-21888") Plugin Feed: 202402021559
Version 1.8 Feb 2, 2024, 2:09 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202402021409
Version 1.7 Feb 1, 2024, 4:21 PM CVE (set "CVE" coverage to "CVE-2023-46805,CVE-2024-21887,CVE-2024-21888,CVE-2024-21893") Plugin metadata Plugin Feed: 202402011621
Version 1.7 Feb 2, 2024, 12:15 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202402021215
Version 1.6 Feb 1, 2024, 12:41 PM Detection (updated fixed versions) Plugin Feed: 202402011241
Version 1.6 Feb 1, 2024, 2:31 PM CVE (set "CVE" coverage to "CVE-2023-46805,CVE-2024-21887,CVE-2024-21888,CVE-2024-21893") Plugin metadata Plugin Feed: 202402011431
Version 1.5 Jan 31, 2024, 9:03 PM CEA reference Plugin Feed: 202401312103
Version 1.4 Jan 22, 2024, 3:14 PM Exploit attributes ("Exploit framework metasploit" set to "True") Plugin Feed: 202401221514
Version 1.3 Jan 15, 2024, 2:36 PM CVSS metrics ("CVSSv2 score" set to 8.5. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:P/A:N") CVSSv2 score source (changed from "CVE-2024-21887" to "CVE-2023-46805") CVSSv3 score source (set to "CVE-2024-21887") Plugin Feed: 202401151436
Version 1.2 Jan 11, 2024, 5:03 PM CISA reference Plugin Feed: 202401111703
Version 1.1 Jan 11, 2024, 3:00 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" set to "Exploits are available") Plugin Feed: 202401111500
Version 1.0 Jan 10, 2024, 11:02 PM New Plugin Feed: 202401102302

* Changelogs are generally available for changes made after Nov 1, 2022