Ivanti Policy Secure vulnerabilities

• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55144 5.4 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55143 6.1 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55142 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55141 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,... CVE-2025-55139 6.8 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55148 7.6 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,... CVE-2025-55147 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy... CVE-2025-55146 4.9 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +3 more +5 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55145 8.9 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 more CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,... CVE-2025-8711 5.4 MediumSeptember 9, 2025
• ivanti connect secure before, connect secure, neurons for secure access +3 more +5 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-8712 5.4 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,... CVE-2025-5468 5.5 MediumAugust 12, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,... CVE-2025-5466 4.9 MediumAugust 12, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy... CVE-2025-5462 7.5 HighAugust 12, 2025
• ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 more A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti... CVE-2025-5456 7.5 HighAugust 12, 2025
• ivanti policy secure A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an... CVE-2023-39339 4.9 MediumJuly 12, 2025
• ivanti connect secure, policy secure +1 more SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22... CVE-2025-0292 5.5 MediumJuly 8, 2025
• ivanti connect secure, policy secure +1 more CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before... CVE-2025-0293 6.6 MediumJuly 8, 2025
• ivanti connect secure, policy secure +1 more Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2... CVE-2025-5463 5.5 MediumJuly 8, 2025
• ivanti connect secure, policy secure +1 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy... CVE-2025-5451 4.9 MediumJuly 8, 2025
• ivanti connect secure, policy secure +1 more Improper access control in the certificate management component of Ivanti Connect Secure before... CVE-2025-5450 6.3 MediumJuly 8, 2025
• ivanti connect secure, policy secure, connect secure, policy secure, and zta gateways +2 more +4 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy... CVE-2025-22457 In KEVPublic exploit EPSS 100.0% 9.0 CriticalApril 3, 2025
• ivanti connect secure, policy secure +1 more External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti... CVE-2024-38657 9.1 CriticalFebruary 21, 2025
• ivanti connect secure, policy secure +1 more Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti... CVE-2024-13843 6.0 MediumFebruary 11, 2025
• ivanti connect secure, policy secure +1 more A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before... CVE-2024-13842 6.0 MediumFebruary 11, 2025
• ivanti connect secure, policy secure +1 more Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before... CVE-2024-13830 6.1 MediumFebruary 11, 2025
• ivanti connect secure, policy secure +1 more External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti... CVE-2024-12058 6.8 MediumFebruary 11, 2025
• ivanti connect secure, policy secure +1 more Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before... CVE-2024-10644 9.1 CriticalFebruary 11, 2025
• ivanti connect secure, neurons for zta gateways, policy secure +1 more +3 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy... CVE-2025-0283 EPSS 17.5% 7.0 HighJanuary 8, 2025
• ivanti connect secure, neurons for zta gateways, policy secure +2 more +4 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy... CVE-2025-0282 In KEVPublic exploit EPSS 100.0% 9.0 CriticalJanuary 8, 2025
• ivanti connect secure, policy secure +1 more An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote... CVE-2024-37401 7.5 HighDecember 11, 2024
• ivanti connect secure, policy secure +1 more A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a... CVE-2024-37377 7.5 HighDecember 11, 2024
• ivanti connect secure, policy secure +1 more Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure... CVE-2024-11634 9.1 CriticalDecember 10, 2024
• ivanti connect secure, policy secure +1 more Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti... CVE-2024-39712 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti... CVE-2024-39711 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Argument injection in Ivanti Connect Secure before version 22.7R2 and 9.1R18.7 and Ivanti Policy... CVE-2024-39710 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy... CVE-2024-39709 7.8 HighNovember 13, 2024
• ivanti connect secure, policy secure, automation +2 more Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti... CVE-2024-38656 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Argument injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure... CVE-2024-38655 9.1 CriticalNovember 13, 2024
• ivanti connect secure, policy secure +1 more Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before... CVE-2024-11004 6.1 MediumNovember 12, 2024
• ivanti connect secure, policy secure +1 more Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure... CVE-2024-11005 9.1 CriticalNovember 12, 2024
• ivanti connect secure, policy secure +1 more Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure... CVE-2024-11006 9.1 CriticalNovember 12, 2024
• ivanti connect secure, policy secure +1 more Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure... CVE-2024-11007 9.1 CriticalNovember 12, 2024
• ivanti connect secure, policy secure +1 more A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy... CVE-2024-8495 7.5 HighNovember 12, 2024
• ivanti connect secure, policy secure +1 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy... CVE-2024-47909 4.9 MediumNovember 12, 2024
• ivanti connect secure, policy secure +1 more Excessive binary privileges in Ivanti Connect Secure which affects versions 22.4R2 through 22.7R2... CVE-2024-47906 7.8 HighNovember 12, 2024
• ivanti connect secure, policy secure +1 more A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before... CVE-2024-9420 8.8 HighNovember 12, 2024
• ivanti connect secure, policy secure +1 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy... CVE-2024-47905 4.9 MediumNovember 12, 2024
• ivanti connect secure, policy secure +1 more Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18... CVE-2024-37404 Public exploit EPSS 71.0% 9.1 CriticalOctober 18, 2024
• ivanti connect secure, policy secure +1 more An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of... CVE-2024-29205 7.5 HighApril 24, 2024
• Show olderLoading…