Ivanti Connect Secure vulnerabilities

• ivanti connect secure Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6... CVE-2026-118527 In KEV 4.3 MediumNovember 3, 2026
• ivanti connect secure Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache... CVE-2026-111357 In KEV 7.0 HighOctober 15, 2026
• ivanti connect secure Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated... CVE-2026-104935 In KEVPublic exploit EPSS 88.9% 8.6 HighOctober 13, 2026
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55144 5.4 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55143 6.1 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55142 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55141 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,... CVE-2025-55139 6.8 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55148 7.6 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,... CVE-2025-55147 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy... CVE-2025-55146 4.9 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +3 more +5 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55145 8.9 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 more CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,... CVE-2025-8711 5.4 MediumSeptember 9, 2025
• ivanti connect secure before, connect secure, neurons for secure access +3 more +5 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-8712 5.4 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,... CVE-2025-5468 5.5 MediumAugust 12, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,... CVE-2025-5466 4.9 MediumAugust 12, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy... CVE-2025-5462 7.5 HighAugust 12, 2025
• ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 more A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti... CVE-2025-5456 7.5 HighAugust 12, 2025
• ivanti connect secure, policy secure +1 more SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22... CVE-2025-0292 5.5 MediumJuly 8, 2025
• ivanti connect secure, policy secure +1 more CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before... CVE-2025-0293 6.6 MediumJuly 8, 2025
• ivanti connect secure Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2... CVE-2025-5464 6.5 MediumJuly 8, 2025
• ivanti connect secure, policy secure +1 more Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2... CVE-2025-5463 5.5 MediumJuly 8, 2025
• ivanti connect secure, policy secure +1 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy... CVE-2025-5451 4.9 MediumJuly 8, 2025
• ivanti connect secure, policy secure +1 more Improper access control in the certificate management component of Ivanti Connect Secure before... CVE-2025-5450 6.3 MediumJuly 8, 2025
• ivanti connect secure, policy secure, connect secure, policy secure, and zta gateways +2 more +4 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy... CVE-2025-22457 In KEVPublic exploit EPSS 100.0% 9.0 CriticalApril 3, 2025
• ivanti connect secure, policy secure +1 more External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti... CVE-2024-38657 9.1 CriticalFebruary 21, 2025
• ivanti connect secure, policy secure +1 more Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti... CVE-2024-13843 6.0 MediumFebruary 11, 2025
• ivanti connect secure, policy secure +1 more A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before... CVE-2024-13842 6.0 MediumFebruary 11, 2025
• ivanti connect secure, policy secure +1 more Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before... CVE-2024-13830 6.1 MediumFebruary 11, 2025
• ivanti connect secure, policy secure +1 more External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti... CVE-2024-12058 6.8 MediumFebruary 11, 2025
• ivanti connect secure, policy secure +1 more Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before... CVE-2024-10644 9.1 CriticalFebruary 11, 2025
• ivanti connect secure A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote... CVE-2025-22467 9.9 CriticalFebruary 11, 2025
• ivanti connect secure, neurons for zta gateways, policy secure +1 more +3 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy... CVE-2025-0283 EPSS 17.5% 7.0 HighJanuary 8, 2025
• ivanti connect secure, neurons for zta gateways, policy secure +2 more +4 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy... CVE-2025-0282 In KEVPublic exploit EPSS 100.0% 9.0 CriticalJanuary 8, 2025
• ivanti connect secure, policy secure +1 more An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote... CVE-2024-37401 7.5 HighDecember 11, 2024
• ivanti connect secure, policy secure +1 more A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a... CVE-2024-37377 7.5 HighDecember 11, 2024
• ivanti connect secure, policy secure +1 more Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure... CVE-2024-11634 9.1 CriticalDecember 10, 2024
• ivanti connect secure Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated... CVE-2024-11633 9.1 CriticalDecember 10, 2024
• ivanti connect secure Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before... CVE-2024-9844 7.1 HighDecember 10, 2024
• ivanti connect secure, policy secure +1 more Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti... CVE-2024-39712 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti... CVE-2024-39711 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Argument injection in Ivanti Connect Secure before version 22.7R2 and 9.1R18.7 and Ivanti Policy... CVE-2024-39710 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy... CVE-2024-39709 7.8 HighNovember 13, 2024
• ivanti connect secure, policy secure, automation +2 more Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti... CVE-2024-38656 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Argument injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure... CVE-2024-38655 9.1 CriticalNovember 13, 2024
• ivanti connect secure An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote... CVE-2024-38649 7.5 HighNovember 13, 2024
• ivanti connect secure An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote... CVE-2024-37400 7.5 HighNovember 13, 2024
• ivanti connect secure, policy secure +1 more Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before... CVE-2024-11004 6.1 MediumNovember 12, 2024
• ivanti connect secure, policy secure +1 more Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure... CVE-2024-11005 9.1 CriticalNovember 12, 2024
• ivanti connect secure, policy secure +1 more Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure... CVE-2024-11006 9.1 CriticalNovember 12, 2024
• Show olderLoading…