Live › vulnerability › CVE-2024-21893
Go to dashboardIvanti Connect Secure, Policy Secure, and Neurons have a server-side request forgery flaw in the SAML component that lets an unauthenticated attacker reach restricted internal resources. CISA lists it as known exploited in the wild and tagged with ransomware use.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Ivanti Connect Secure, Policy Secure, and Neurons | vendor | – | – |
| ivanti connect secure | vendor | = 9.0 | – |
| ivanti connect secure | vendor | = 9.1 | – |
| ivanti connect secure | vendor | = 21.9 | – |
| ivanti connect secure | vendor | = 21.12 | – |
| ivanti connect secure | vendor | = 22.1 | – |
| ivanti connect secure | vendor | = 22.2 | – |
| ivanti connect secure | vendor | = 22.3 | – |
| ivanti connect secure | vendor | = 22.4 | – |
| ivanti connect secure | vendor | = 22.6 | – |
| ivanti policy secure | vendor | = 9.0 | – |
| ivanti policy secure | vendor | = 9.1 | – |
| ivanti policy secure | vendor | = 22.1 | – |
| ivanti policy secure | vendor | = 22.2 | – |
| ivanti policy secure | vendor | = 22.3 | – |
| ivanti policy secure | vendor | = 22.4 | – |
| ivanti policy secure | vendor | = 22.5 | – |
| ivanti policy secure | vendor | = 22.6 | – |
| ivanti neurons for zero-trust access | vendor | – | – |
| ivanti neurons for zero-trust access | vendor | = 22.2 | – |
| ivanti neurons for zero-trust access | vendor | = 22.3 | – |
| ivanti neurons for zero-trust access | vendor | = 22.4 | – |
| ivanti neurons for zero-trust access | vendor | = 22.5 | – |
| ivanti neurons for zero-trust access | vendor | = 22.6 | – |
Unknown from the sources.
Apply the mitigations per Ivanti's vendor instructions, or discontinue use of the product if mitigations are unavailable (per CISA required action).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
@wdormann.bsky.social · Bluesky4 likes · 1 reposts2024-02-03 16:41“Ivanti Connect Secure is vulnerable to xmltooling CVE-2023-36661. How was this handled? HackerOne assigned CVE-2024-21893 to capture this. Nobody knows how CVE works, and nobody enforces any rules. 🤦♂️ twitter.com/stephenfewer... https://twitter.com/stephenfewer/status/1753507673742405636”
View on Bluesky
Posts are quoted with a link to the original. They are data to us, never instructions.
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2024-21893")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.