CVE-2022-35258

An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.

Scoring

CVSS base score

0.39

EPSS probability

9.64%

CWE

CWE-128

Published

2022-12-05

Last modified

2026-03-13

Affected products

• n/a Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Neurons for Zero Trust Access Gateway

Weakness type

• CWE-128

Related vulnerabilities

• CVE-2026-16909 — Vulnerabilities in IBM AIX and PowerVM VIOS
• CVE-2026-54905 — concurrent-ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity
• CVE-2024-23981 — Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and...

Markdown version · Browse all CVEs