Ivanti Rolls Out Patches For Exploited Connect Secure Flaws

After delays, Ivanti has rolled out its first round of patches for two known actively exploited vulnerabilities in its Ivanti Connect Secure VPN and Ivanti Policy Secure appliances. Customers are being urged to immediately apply the patches, as the flaws are being widely exploited by threat actors.

Ivanti on Wednesday said that as part of its investigations into the two known vulnerabilities (CVE-2024-21887 and CVE-2023-46805), which were first disclosed on Jan. 10, it discovered two new flaws in the web …

actively exploited connect customers exploited exploited vulnerabilities flaws ivanti ivanti connect secure ivanti connect secure vpn ivanti policy secure patches policy secure vpn threat threat actors vpn vulnerabilities