CVE-2022-35254

score

<0.1

cvss

7.5

epss

2.7%

published

2022-12-05

kev added

—

first seen

2026-10-21

Ivanti Connect Secure (ICS) prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4; Ivanti Policy Secure (IPS) prior to 9.1R17 and 22.3R1; and Ivanti Neurons for Zero-Trust Access prior to 22.3R1 contain a denial-of-service caused by unauthenticated access, letting attackers cause service disruption, exploit requires no authentication.