Answer in brief
CVE-2023-46805 records a High severity (CVSS 8.2) vulnerability in CVE Program Container. The current sources mark it as known exploited. The current feed maps Ivanti/ICS (generic), Ivanti/IPS (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.2. Known-exploitation status makes exposure review time-sensitive. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Ivanti/ICS (generic), Ivanti/IPS (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:a:ivanti:connect_secure:22.1:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.1:r6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.2:-:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.2:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.3:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.4:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.4:r2.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.5:r2.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.6:-:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.6:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.6:r2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r10:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r11:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r11.5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r12.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r13:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r13.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r14:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r15:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r15.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r16:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r16.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r17:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r17.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r18:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.1:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.1:r6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.2:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.2:r3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.3:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.3:r3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.4:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.4:r2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.4:r2.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.5:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.5:r2.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.6:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r10:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r11:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r12:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r13:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r13.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r14:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r15:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r16:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r17:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r18:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r8:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r8.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r8.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r9:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Ivanti/ICSgeneric | 9.1R18 || 22.6R2 | Not reported |
| Ivanti/IPSgeneric | 9.1R18 || 22.6R1 | Not reported |
Published upstream
Jan 12, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
May 24, 2026
Added to CISA KEV
Jan 10, 2024
Evidence: source:kev:kev:kev:recordAn authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2023-46805 records a High severity (CVSS 8.2) vulnerability in CVE Program Container. The current sources mark it as known exploited. The current feed maps Ivanti/ICS (generic), Ivanti/IPS (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.2. Known-exploitation status makes exposure review time-sensitive. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Ivanti/ICS (generic), Ivanti/IPS (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:a:ivanti:connect_secure:22.1:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.1:r6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.2:-:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.2:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.3:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.4:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.4:r2.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.5:r2.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.6:-:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.6:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:22.6:r2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r10:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r11:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r11.5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r12.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r13:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r13.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r14:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r15:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r15.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r16:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r16.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r17:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r17.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r18:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.1:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.1:r6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.2:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.2:r3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.3:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.3:r3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.4:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.4:r2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.4:r2.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.5:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.5:r2.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:22.6:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.0:*:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r10:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r11:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r12:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r13:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r13.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r14:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r15:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r16:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r17:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r18:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r8:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r8.1:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r8.2:*:*:*:*:*:* | Not reported | Not reported |
| cpe:2.3:a:ivanti:policy_secure:9.1:r9:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Ivanti/ICSgeneric | 9.1R18 || 22.6R2 | Not reported |
| Ivanti/IPSgeneric | 9.1R18 || 22.6R1 | Not reported |
Published upstream
Jan 12, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
May 24, 2026
Added to CISA KEV
Jan 10, 2024
Evidence: source:kev:kev:kev:recordAn authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
Quoted source text, attributed separately from HOL analysis.