Skip to contentIvanti Connect Secure vulnerabilities
- ivanti connect secureUse of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6...CVE-2026-118527In KEV4.3 Medium
- ivanti connect secureIvanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache...CVE-2026-111357In KEV7.0 High
- ivanti connect secureAuthentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated...CVE-2026-104935In KEVPublic exploitEPSS 88.9%8.6 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551445.4 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreReflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551436.1 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551428.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551418.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreSSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-551396.8 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551487.6 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreCSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-551478.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreAn unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy...CVE-2025-551464.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +3 more +5 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551458.9 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreCSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-87115.4 Medium
- ivanti connect secure before, connect secure, neurons for secure access +3 more +5 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-87125.4 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreImproper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,...CVE-2025-54685.5 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreXEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,...CVE-2025-54664.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy...CVE-2025-54627.5 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreA buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti...CVE-2025-54567.5 High
- ivanti connect secure, policy secure +1 moreSSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22...CVE-2025-02925.5 Medium
- ivanti connect secure, policy secure +1 moreCLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before...CVE-2025-02936.6 Medium
- ivanti connect secureInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2...CVE-2025-54646.5 Medium
- ivanti connect secure, policy secure +1 moreInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2...CVE-2025-54635.5 Medium
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy...CVE-2025-54514.9 Medium
- ivanti connect secure, policy secure +1 moreImproper access control in the certificate management component of Ivanti Connect Secure before...CVE-2025-54506.3 Medium
- ivanti connect secure, policy secure, connect secure, policy secure, and zta gateways +2 more +4 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy...CVE-2025-22457In KEVPublic exploitEPSS 100.0%9.0 Critical
- ivanti connect secure, policy secure +1 moreExternal control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti...CVE-2024-386579.1 Critical
- ivanti connect secure, policy secure +1 moreCleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...CVE-2024-138436.0 Medium
- ivanti connect secure, policy secure +1 moreA hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before...CVE-2024-138426.0 Medium
- ivanti connect secure, policy secure +1 moreReflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before...CVE-2024-138306.1 Medium
- ivanti connect secure, policy secure +1 moreExternal control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...CVE-2024-120586.8 Medium
- ivanti connect secure, policy secure +1 moreCode injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before...CVE-2024-106449.1 Critical
- ivanti connect secureA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote...CVE-2025-224679.9 Critical
- ivanti connect secure, neurons for zta gateways, policy secure +1 more +3 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy...CVE-2025-0283EPSS 17.5%7.0 High
- ivanti connect secure, neurons for zta gateways, policy secure +2 more +4 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy...CVE-2025-0282In KEVPublic exploitEPSS 100.0%9.0 Critical
- ivanti connect secure, policy secure +1 moreAn out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote...CVE-2024-374017.5 High
- ivanti connect secure, policy secure +1 moreA heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a...CVE-2024-373777.5 High
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure...CVE-2024-116349.1 Critical
- ivanti connect secureArgument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated...CVE-2024-116339.1 Critical
- ivanti connect secureInsufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before...CVE-2024-98447.1 High
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti...CVE-2024-397129.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti...CVE-2024-397119.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2 and 9.1R18.7 and Ivanti Policy...CVE-2024-397109.1 Critical
- ivanti connect secure, policy secure +1 moreIncorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy...CVE-2024-397097.8 High
- ivanti connect secure, policy secure, automation +2 moreArgument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti...CVE-2024-386569.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-386559.1 Critical
- ivanti connect secureAn out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote...CVE-2024-386497.5 High
- ivanti connect secureAn out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote...CVE-2024-374007.5 High
- ivanti connect secure, policy secure +1 moreReflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before...CVE-2024-110046.1 Medium
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-110059.1 Critical
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-110069.1 Critical
- Show olderLoading…