CVE-2024-21893CISA KEVEPSS p100.0%

CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

Ivanti / Connect Secure, Policy Secure, and Neurons

Description

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.

Scoring

CVSS 8.2 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS100.00% probability of exploitation · percentile 100.0% · 2026-06-15T12:03:41Z
Last modified2026-08-04

CISA KEV entry

Added to KEV: 2024-01-31

(incoming)1

TypeTargetConfidenceTier
KEVEntryIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerabilitykev-cve-2024-218930%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
CVE
CVE-2025-55147
CVE
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
CVE
CVE-2025-55145
CVE
CVE-2026-9614
CVE
CVE-2026-8992
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.