Is CVE-2023-46805 actively exploited?

CVE-2023-46805 has no public evidence of in-the-wild exploitation as of 2025-10-31.

What is the CVSS score for CVE-2023-46805?

CVE-2023-46805 has a CVSS score of 8.2 (HIGH severity). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

How do I patch CVE-2023-46805?

Patch guidance is available from ivanti security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2023-46805.

Fix CVE-2023-46805 - HIGH ivanti connect secure

Q: Which products are affected by CVE-2023-46805?

81 products: ivanti connect secure, ivanti connect secure, ivanti connect secure, ivanti connect secure, ivanti connect secure, and 76 more.

Description

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

CVSS Metrics

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Attack Vector: network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: low
Availability: none
Weaknesses: CWE-287 · Improper Authentication

Metadata

Primary Vendor: IVANTI
Published: 1/12/2024
Last Modified: 10/31/2025
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

ivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : connect_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secureivanti : policy_secure

Remediation Guidance

Executive Summary

View on NIST NVD