An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.
History

Thu, 24 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2022-12-05T00:00:00.000Z

Updated: 2025-04-24T14:43:33.701Z

Reserved: 2022-07-06T00:00:00.000Z

Link: CVE-2022-35254

cve-icon Vulnrichment

Updated: 2024-08-03T09:29:17.468Z

cve-icon NVD

Status : Modified

Published: 2022-12-05T22:15:10.457

Modified: 2025-04-24T15:15:47.600

Link: CVE-2022-35254

cve-icon Redhat

No data.