CVE-2023-39339: Ivanti Policy Secure

Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days.

A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an authenticated administrator can perform an arbitrary file read via a maliciously crafted web request.

Affected products

• Ivanti Policy Secure: before 22.6 (fixed in 22.6); version 22.6 only

Published 2025-07-12. Last modified 2026-06-17.