Ivanti Connect Secure
64 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-111357 | 22.8R2.4 | Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege e | HIGH 7.0 | 0.2 % | ||
| CVE-2026-104935 | fixed in 25.1.3.0, 25.1.3.1, 22.8R2.5, … | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. Thi | HIGH 8.6 | 87 % | KEV | |
| CVE-2025-55144 | fixed in 22.7R2.9, 22.8R2 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | MEDIUM 5.4 | 0.6 % | ||
| CVE-2025-55143 | fixed in 22.7R2.9, 22.8R2 | Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before | MEDIUM 6.1 | 0.7 % | ||
| CVE-2025-55142 | fixed in 22.7R2.9, 22.8R2 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 8.8 | 1.0 % | ||
| CVE-2025-55141 | fixed in 22.7R2.9, 22.8R2 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 8.8 | 1.0 % | ||
| CVE-2025-55139 | fixed in 22.7R2.9, 22.8R2 | SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva | MEDIUM 6.8 | 0.9 % | ||
| CVE-2025-55148 | fixed in 22.7R2.9, 22.8R2 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 7.6 | 0.6 % | ||
| CVE-2025-55147 | fixed in 22.7R2.9, 22.8R2 | CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva | HIGH 8.8 | 0.6 % | ||
| CVE-2025-55146 | fixed in 22.7R2.9, 22.8R2 | An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway befor | MEDIUM 4.9 | 0.8 % | ||
| CVE-2025-8711 | fixed in 22.7R2.9, 22.8R2 | CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva | MEDIUM 5.4 | 0.3 % | ||
| CVE-2025-5468 | fixed in 22.7R2.8, 22.8R2 | Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti | MEDIUM 5.5 | 0.4 % | ||
| CVE-2025-5466 | fixed in 22.7R2.8, 22.8R2 | XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Iva | MEDIUM 4.9 | 0.7 % | ||
| CVE-2025-5462 | fixed in 22.7R2.8, 22.8R2 | A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway be | HIGH 7.5 | 1.1 % | ||
| CVE-2025-5456 | fixed in 22.7R2.8, 22.8R2 | A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gatewa | HIGH 7.5 | 1.1 % | ||
| CVE-2025-0292 | fixed in 22.7R2.8 | SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacke | MEDIUM 5.5 | 0.6 % | ||
| CVE-2025-0293 | fixed in 22.7R2.8 | CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticat | MEDIUM 6.6 | 0.4 % | ||
| CVE-2025-5464 | fixed in 22.7R2.8 | Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to | MEDIUM 6.5 | 0.3 % | ||
| CVE-2025-5463 | fixed in 22.7R2.8 | Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version | MEDIUM 5.5 | 0.3 % | ||
| CVE-2025-5451 | fixed in 22.7R2.8 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a rem | MEDIUM 4.9 | 0.7 % | ||
| CVE-2025-5450 | fixed in 22.7R2.8 | Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure be | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-22457 | fixed in 22.7R2.6 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-38657 | 22.7R2.4 – < 22.7R2.4 | External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a r | CRITICAL 9.1 | 1.6 % | ||
| CVE-2024-13843 | fixed in 22.7R2.6 | Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a | MEDIUM 6.0 | 0.4 % | ||
| CVE-2024-13842 | fixed in 22.7R2.3 | A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticat | MEDIUM 6.0 | 0.3 % | ||
| CVE-2024-13830 | fixed in 22.7R2.6 | Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote unauthentica | MEDIUM 6.1 | 0.7 % | ||
| CVE-2024-12058 | fixed in 22.7R2.6 | External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a r | MEDIUM 6.8 | 1.1 % | ||
| CVE-2024-10644 | fixed in 22.7R2.4 | Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticat | CRITICAL 9.1 | 2.8 % | ||
| CVE-2025-22467 | fixed in 22.7R2.6 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code | CRITICAL 9.9 | 4.7 % | ||
| CVE-2025-0283 | fixed in 22.7R2.5 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu | HIGH 7.0 | 17 % | ||
| CVE-2025-0282 | 22.7R2 – 22.7R2.4 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu | CRITICAL 9.0 | 100 % | KEV | |
| CVE-2024-37401 | 22.7R2.1 – < 22.7R2.1 | An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial o | HIGH 7.5 | 1.5 % | ||
| CVE-2024-37377 | 22.7R2.3 – < 22.7R2.3 | A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a d | HIGH 7.5 | 1.8 % | ||
| CVE-2024-11634 | fixed in 22.7R2.3 | Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenti | CRITICAL 9.1 | 1.8 % | ||
| CVE-2024-11633 | fixed in 22.7R2.4 | Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achieve | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-9844 | fixed in 22.7R2.4 | Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticat | HIGH 8.8 | 1.0 % | ||
| CVE-2024-39712 | 22.7R2.1 – < 22.7R2.1 ; 9.1R18.7 – < 9.1R18.7 | Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a r | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-39711 | 22.7R2.1 – < 22.7R2.1 ; 9.1R18.7 – < 9.1R18.7 | Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-39710 | 22.7R2.1 – < 22.7R2.1 ; 9.1R18.7 – < 9.1R18.7 | Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a r | CRITICAL 9.1 | 1.9 % | ||
| CVE-2024-39709 | 22.6R2 – < 22.6R2 | Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version | HIGH 7.8 | 0.3 % | ||
| CVE-2024-38656 | 22.7R2.2 – < 22.7R2.2 ; 9.1R18.9 – < 9.1R18.9 | Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a r | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-38655 | 22.7R2.1 – < 22.7R2.1 ; 9.1R18.9 – < 9.1R18.9 | Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18 | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-38649 | 22.7R2.1 – < 22.7R2.1 | An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated at | HIGH 7.5 | 1.9 % | ||
| CVE-2024-37400 | 22.7R2.3 – < 22.7R2.3 | An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop, | HIGH 7.5 | 2.1 % | ||
| CVE-2024-11004 | fixed in 22.7R2.1 | Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthentica | MEDIUM 6.1 | 0.9 % | ||
| CVE-2024-11005 | fixed in 22.7R2.1 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1. | CRITICAL 9.1 | 1.6 % | ||
| CVE-2024-11006 | fixed in 22.7R2.1 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1. | CRITICAL 9.1 | 1.6 % | ||
| CVE-2024-11007 | fixed in 22.7R2.1 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1. | CRITICAL 9.1 | 1.6 % | ||
| CVE-2024-8495 | fixed in 22.7R2.1 | A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote | HIGH 7.5 | 1.4 % | ||
| CVE-2024-47909 | fixed in 22.7R2.3 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a rem | MEDIUM 4.9 | 1.1 % | ||
| CVE-2024-47907 | fixed in 22.7R2.3 | A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a | HIGH 7.5 | 1.6 % | ||
| CVE-2024-47906 | 22.4R2 – 22.7R2.2 | Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before versi | HIGH 7.8 | 0.2 % | ||
| CVE-2024-9420 | fixed in 22.7R2.3 | A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a r | HIGH 8.8 | 1.4 % | ||
| CVE-2024-47905 | fixed in 22.7R2.3 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a rem | MEDIUM 4.9 | 1.1 % | ||
| CVE-2024-37404 | 22.7R2.1 – < 22.7R2.1 ; 9.1R18.9 – < 9.1R18.9 | Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 | CRITICAL 9.1 | 71 % | ||
| CVE-2023-38551 | 22.7R2 – < 22.7R2 ; 22.5R2.2 – < 22.5R2.2 ; 9.1R18.6 – < 9.1R18.6 | A CRLF Injection vulnerability in Ivanti Connect Secure (9.x, 22.x) allows an authenticated high-privileged user to inject malicious code on | HIGH 8.2 | 1.0 % | ||
| CVE-2024-29205 | 9.1R18.5 – < 9.1R18.5 ; 22.6R2.3 – < 22.6R2.3 ; 9.1R17.4 – < 9.1R17.4 ; … | An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti P | HIGH 7.5 | 1.6 % | ||
| CVE-2024-21894 | 22.1R6.2 – < 22.1R6.2 ; 22.2R4.2 – < 22.2R4.2 ; 22.3R1.2 – < 22.3R1.2 ; … | A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated mal | CRITICAL 9.8 | 19 % | ||
| CVE-2024-22053 | 22.1R6.2 – < 22.1R6.2 ; 22.2R4.2 – < 22.2R4.2 ; 22.3R1.2 – < 22.3R1.2 ; … | A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated mal | HIGH 8.2 | 3.5 % | ||
| CVE-2024-22052 | 22.1R6.2 – < 22.1R6.2 ; 22.2R4.2 – < 22.2R4.2 ; 22.3R1.2 – < 22.3R1.2 ; … | A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthen | HIGH 7.5 | 3.8 % | ||
| CVE-2024-22023 | 22.1R6.2 – < 22.1R6.2 ; 22.2R4.2 – < 22.2R4.2 ; 22.3R1.2 – < 22.3R1.2 ; … | An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unaut | MEDIUM 5.3 | 3.0 % | ||
| CVE-2023-39340 | 22.6.1 – < 22.6.1 | A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to | HIGH 7.5 | 2.4 % | ||
| CVE-2023-41720 | 22.6.1 – < 22.6.1 | A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure ( | HIGH 7.8 | 0.7 % | ||
| CVE-2023-41719 | 22.6.1 – < 22.6.1 | A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a sp | HIGH 7.2 | 3.4 % |