CVE-2023-46805: listed in the CISA KEV catalog CVE-2023-46805 · CVSS 8.2 HIGH · EPSS 100.0% · KEV 2024-01-10
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
Is CVE-2023-46805 exploited? Listed in the CISA KEV catalog on 2024-01-10. Federal remediation due 2024-01-22. Past that date by 936 days. Used in ransomware campaigns. EPSS puts exploitation in the next 30 days at 100.0%. Public exploit code: packaged in a public tool. Public detection rules exist. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2023-46805 Primary sources What this record does not say No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-11.
CVE-2023-46805: listed in the CISA KEV catalog CVE-2023-46805 · CVSS 8.2 HIGH · EPSS 100.0% · KEV 2024-01-10
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
Is CVE-2023-46805 exploited? Listed in the CISA KEV catalog on 2024-01-10. Federal remediation due 2024-01-22. Past that date by 936 days. Used in ransomware campaigns. EPSS puts exploitation in the next 30 days at 100.0%. Public exploit code: packaged in a public tool. Public detection rules exist. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2023-46805 Primary sources What this record does not say No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-11.