Skip to contentIvanti Policy Secure vulnerabilities
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551445.4 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreReflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551436.1 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551428.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551418.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreSSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-551396.8 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551487.6 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreCSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-551478.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreAn unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy...CVE-2025-551464.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +3 more +5 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551458.9 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreCSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-87115.4 Medium
- ivanti connect secure before, connect secure, neurons for secure access +3 more +5 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-87125.4 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreImproper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,...CVE-2025-54685.5 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreXEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,...CVE-2025-54664.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy...CVE-2025-54627.5 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreA buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti...CVE-2025-54567.5 High
- ivanti policy secureA vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an...CVE-2023-393394.9 Medium
- ivanti connect secure, policy secure +1 moreSSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22...CVE-2025-02925.5 Medium
- ivanti connect secure, policy secure +1 moreCLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before...CVE-2025-02936.6 Medium
- ivanti connect secure, policy secure +1 moreInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2...CVE-2025-54635.5 Medium
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy...CVE-2025-54514.9 Medium
- ivanti connect secure, policy secure +1 moreImproper access control in the certificate management component of Ivanti Connect Secure before...CVE-2025-54506.3 Medium
- ivanti connect secure, policy secure, connect secure, policy secure, and zta gateways +2 more +4 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy...CVE-2025-22457In KEVPublic exploitEPSS 100.0%9.0 Critical
- ivanti connect secure, policy secure +1 moreExternal control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti...CVE-2024-386579.1 Critical
- ivanti connect secure, policy secure +1 moreCleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...CVE-2024-138436.0 Medium
- ivanti connect secure, policy secure +1 moreA hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before...CVE-2024-138426.0 Medium
- ivanti connect secure, policy secure +1 moreReflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before...CVE-2024-138306.1 Medium
- ivanti connect secure, policy secure +1 moreExternal control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...CVE-2024-120586.8 Medium
- ivanti connect secure, policy secure +1 moreCode injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before...CVE-2024-106449.1 Critical
- ivanti connect secure, neurons for zta gateways, policy secure +1 more +3 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy...CVE-2025-0283EPSS 17.5%7.0 High
- ivanti connect secure, neurons for zta gateways, policy secure +2 more +4 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy...CVE-2025-0282In KEVPublic exploitEPSS 100.0%9.0 Critical
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure...CVE-2024-116349.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti...CVE-2024-397129.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti...CVE-2024-397119.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2 and 9.1R18.7 and Ivanti Policy...CVE-2024-397109.1 Critical
- ivanti connect secure, policy secure +1 moreIncorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy...CVE-2024-397097.8 High
- ivanti connect secure, policy secure, automation +2 moreArgument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti...CVE-2024-386569.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-386559.1 Critical
- ivanti connect secure, policy secure +1 moreReflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before...CVE-2024-110046.1 Medium
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-110059.1 Critical
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-110069.1 Critical
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-110079.1 Critical
- ivanti connect secure, policy secure +1 moreA null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy...CVE-2024-84957.5 High
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy...CVE-2024-479094.9 Medium
- ivanti connect secure, policy secure +1 moreExcessive binary privileges in Ivanti Connect Secure which affects versions 22.4R2 through 22.7R2...CVE-2024-479067.8 High
- ivanti connect secure, policy secure +1 moreA use-after-free in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before...CVE-2024-94208.8 High
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy...CVE-2024-479054.9 Medium
- ivanti connect secure, policy secure +1 moreImproper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18...CVE-2024-37404Public exploitEPSS 71.0%9.1 Critical
- ivanti connect secure, policy secure +1 moreAn Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of...CVE-2024-292057.5 High
- ivanti connect secure, policy secure +1 moreA heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti...CVE-2024-21894EPSS 19.0%8.2 High
- ivanti connect secure, policy secure +1 moreA heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x
22.x) and Ivanti...CVE-2024-220538.2 High
- Show olderLoading…