Ivanti Secure Access vulnerabilities

• ivanti secure access client An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6... CVE-2026-8992 8.8 HighMay 22, 2026
• ivanti secure access client A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user... CVE-2026-7432 7.8 HighMay 12, 2026
• ivanti secure access client An incorrect permission assignment for critical resource of Ivanti Secure Access Client   before... CVE-2026-7431 4.4 MediumMay 12, 2026
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55144 5.4 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55143 6.1 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55142 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55141 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,... CVE-2025-55139 6.8 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55148 7.6 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,... CVE-2025-55147 8.8 HighSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy... CVE-2025-55146 4.9 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +3 more +5 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-55145 8.9 HighSeptember 9, 2025
• ivanti connect secure before, connect secure, neurons for secure access +3 more +5 more Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure... CVE-2025-8712 5.4 MediumSeptember 9, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,... CVE-2025-5468 5.5 MediumAugust 12, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,... CVE-2025-5466 4.9 MediumAugust 12, 2025
• ivanti connect secure, neurons for secure access, policy secure +2 more +4 more A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy... CVE-2025-5462 7.5 HighAugust 12, 2025
• ivanti secure access client Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a... CVE-2025-22454 7.8 HighMarch 11, 2025
• ivanti secure access client Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local... CVE-2024-13813 7.1 HighFebruary 11, 2025
• ivanti secure access client Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local... CVE-2024-38654 4.4 MediumNovember 13, 2024
• ivanti secure access client Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated... CVE-2024-37398 7.8 HighNovember 13, 2024
• ivanti secure access client A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local... CVE-2024-29211 7.1 HighNovember 13, 2024
• ivanti secure access client Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated... CVE-2024-7571 7.8 HighNovember 12, 2024
• ivanti secure access client A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated... CVE-2024-9843 5.0 MediumNovember 12, 2024
• ivanti secure access client Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local... CVE-2024-9842 7.3 HighNovember 12, 2024
• ivanti secure access client Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local... CVE-2024-8539 7.1 HighNovember 12, 2024
• ivanti secure access client, secure access linux +1 more A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1... CVE-2023-46810 7.3 HighMay 31, 2024
• ivanti secure access client A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a... CVE-2023-38042 7.8 HighMay 31, 2024
• absolute software secure access, ivanti secure access client +1 more When a particular process flow is initiated, an attacker may be able to gain unauthorized... CVE-2023-41718 7.8 HighNovember 14, 2023
• ivanti secure access linux, secure access client +1 more A logged in user can modify specific files that may lead to unauthorized changes in system-wide... CVE-2023-38544 5.3 MediumNovember 14, 2023
• ivanti secure access client, secure access client windows +1 more When a specific component is loaded a local attacker and is able to send a specially crafted... CVE-2023-38543 8.8 HighNovember 14, 2023
• ivanti secure access client, secure access client windows +1 more When a specific component is loaded a local attacker and is able to send a specially crafted... CVE-2023-38043 8.8 HighNovember 14, 2023
• ivanti secure access client A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow... CVE-2023-35080 Public exploit 8.8 HighNovember 14, 2023
• ivanti secure access client A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU)... CVE-2023-38041 Public exploit 7.8 HighOctober 25, 2023