{"api_version":"v1","generated_at":"2026-10-08T16:50:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-ivanti-ics-22697f8839cd","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/ics","name":"ICS","next_cursor":null,"observations":[{"affected":"9.1R14.5 < 9.1R14.5; 9.1R17.3 < 9.1R17.3; 9.1R18.4 < 9.1R18.4; 22.1R6.1 < 22.1R6.1; 22.2R4.1 < 22.2R4.1; 22.3R1.1 < 22.3R1.1; 22.4R1.1 < 22.4R1.1; 22.5R1.2 < 22.5R1.2","affected_versions_present":true,"cve_id":"CVE-2024-22024","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-22024","fixed":"9.1R14.4 < 9.1R14.4; 9.1R15.2 < 9.1R15.2; 9.1R16.2 < 9.1R16.2; 9.1R17.2 < 9.1R17.2; 9.1R18.3 < 9.1R18.3; 22.1R6.1 < 22.1R6.1; 22.2R4.1 < 22.2R4.1; 22.3R1 < 22.3R1","last_modified":"2025-05-09T18:26:09.386Z","patch_url":"https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US","primary_source":"","published":"2024-02-13T04:07:04.355Z"},{"affected":"9.1R18 \u2264 9.1R18; 22.6R2 \u2264 22.6R2; 22.6R1 \u2264 22.6R1","affected_versions_present":true,"cve_id":"CVE-2024-21888","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-21888","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:13:18.517Z","patch_url":"","primary_source":"","published":"2024-01-31T17:51:34.941Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"Ivanti"}}
