VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 5, 2022· Updated Jun 17, 2026

CVE-2022-35258

CVE-2022-35258

Description

An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.

Affected products

80
  • Ivanti/Connect Secure51 versions
    cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*+ 50 more
    • cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*range: <9.1
    • cpe:2.3:a:ivanti:connect_secure:21.12:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:21.9:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.2:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r13.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r13:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r14:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r15:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r16.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r16:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r2.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r3.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r5.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r6.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r7.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: <9.1R14.3, <9.1R15.2, <9.1R16.2, <22.2R4
  • Ivanti/Neurons For Zero Trust Access
    cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.2:r1:*:*:*:*:*:*
  • Ivanti/Policy Secure27 versions
    cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*+ 26 more
    • cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*range: <9.1
    • cpe:2.3:a:ivanti:policy_secure:22.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r10:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r11:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r12:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r13.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r13:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r14:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r15:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r16:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r8.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r8.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r9:*:*:*:*:*:*
    • (no CPE)range: <9.1R17, <22.3R1
  • Ivanti/Ivanti Neurons for Zero-Trust Accessllm-fuzzy
    Range: <22.3R1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.