Skip to content
Back to search

CVE-2023-46805

HIGH
8.2 RansomwareNVD

Summary

generated automatically from NVD data

CVE-2023-46805 is an authentication bypass (CWE-287) in the web component of Ivanti Connect Secure (ICS) 9.x and 22.x and of Ivanti Policy Secure. A remote attacker can get around control checks and reach restricted resources without authenticating or any user interaction. It carries a CVSS v3.1 score of 8.2 (HIGH), and CISA's KEV catalog lists it as exploited, including in ransomware campaigns.

NVD description

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

Share:

⚠️ Actively exploited — CISA KEV

This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2024-01-10. It is confirmed exploited in the wild and must be patched as a priority.

Remediation deadline (US federal agencies): 2024-01-22

Used in known ransomware campaigns.

EPSS · FIRST.org

100.0%probability of exploitation in the next 30 days

Higher than 99% of scored CVEs

EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.

In-depth analysis on cveo.tech

We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.

CVSS v3.1 Score

8.2
/ 10.0
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Information

Published
12 janv. 2024
Updated
1 oct. 2026
Status
Analyzed
Source
support@hackerone.com

Affected products

ivanti connect secure
Versions : 9.0, 9.1, 22.1, 22.2, 22.3
ivanti policy secure
Versions : 9.0, 9.1, 22.1, 22.2, 22.3

Weaknesses (CWE)

CWE-287

References (5)

Similar CVEs

Other vulnerabilities of type CWE-287

…

Monitor your products

Get automatic alerts for every new CVE affecting your equipment.

Enable monitoring