Ivanti Policy Secure
52 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-55144 | fixed in 22.7R1.6 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | MEDIUM 5.4 | 0.6 % | ||
| CVE-2025-55143 | fixed in 22.7R1.6 | Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before | MEDIUM 6.1 | 0.7 % | ||
| CVE-2025-55142 | fixed in 22.7R1.6 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 8.8 | 1.0 % | ||
| CVE-2025-55141 | fixed in 22.7R1.6 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 8.8 | 1.0 % | ||
| CVE-2025-55139 | fixed in 22.7R1.6 | SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva | MEDIUM 6.8 | 0.9 % | ||
| CVE-2025-55148 | fixed in 22.7R1.6 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 7.6 | 0.6 % | ||
| CVE-2025-55147 | fixed in 22.7R1.6 | CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva | HIGH 8.8 | 0.6 % | ||
| CVE-2025-55146 | fixed in 22.7R1.6 | An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway befor | MEDIUM 4.9 | 0.8 % | ||
| CVE-2025-55145 | fixed in 22.7R1.6 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2. | HIGH 8.9 | 0.7 % | ||
| CVE-2025-8711 | fixed in 22.7R1.6 | CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Iva | MEDIUM 5.4 | 0.3 % | ||
| CVE-2025-8712 | fixed in 22.7R1.6 | Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22 | MEDIUM 5.4 | 0.5 % | ||
| CVE-2025-5468 | fixed in 22.7R1.5 | Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti | MEDIUM 5.5 | 0.4 % | ||
| CVE-2025-5466 | fixed in 22.7R1.5 | XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Iva | MEDIUM 4.9 | 0.7 % | ||
| CVE-2025-5462 | fixed in 22.7R1.5 | A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway be | HIGH 7.5 | 1.1 % | ||
| CVE-2025-5456 | fixed in 22.7R1.5 | A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gatewa | HIGH 7.5 | 1.1 % | ||
| CVE-2023-39339 | 22.6R1 – < 22.6R1 | A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an authenticated administrator can perform an arbitrary fi | MEDIUM 4.9 | 1.0 % | ||
| CVE-2025-0292 | fixed in 22.7R1.5 | SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacke | MEDIUM 5.5 | 0.6 % | ||
| CVE-2025-0293 | fixed in 22.7R1.5 | CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticat | MEDIUM 6.6 | 0.4 % | ||
| CVE-2025-5463 | fixed in 22.7R1.5 | Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version | MEDIUM 5.5 | 0.3 % | ||
| CVE-2025-5451 | fixed in 22.7R1.5 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a rem | MEDIUM 4.9 | 0.7 % | ||
| CVE-2025-5450 | fixed in 22.7R1.5 | Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure be | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-22457 | fixed in 22.7R1.4 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA | CRITICAL 9.8 | 100 % | KEV | |
| CVE-2024-38657 | 22.7R1.3 – < 22.7R1.3 | External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a r | CRITICAL 9.1 | 1.6 % | ||
| CVE-2024-13843 | fixed in 22.7R1.3 | Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a | MEDIUM 6.0 | 0.4 % | ||
| CVE-2024-13842 | fixed in 22.7R1.3 | A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticat | MEDIUM 6.0 | 0.3 % | ||
| CVE-2024-13830 | fixed in 22.7R1.3 | Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote unauthentica | MEDIUM 6.1 | 0.7 % | ||
| CVE-2024-12058 | fixed in 22.7R1.3 | External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a r | MEDIUM 6.8 | 1.1 % | ||
| CVE-2024-10644 | fixed in 22.7R1.3 | Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticat | CRITICAL 9.1 | 2.8 % | ||
| CVE-2025-0283 | 22.7R1.2 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu | HIGH 7.0 | 17 % | ||
| CVE-2025-0282 | 22.7R1 – 22.7R1.2 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu | CRITICAL 9.0 | 100 % | KEV | |
| CVE-2024-11634 | fixed in 22.7R1.2 | Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenti | CRITICAL 9.1 | 1.8 % | ||
| CVE-2024-39712 | 22.7R1.1 – < 22.7R1.1 | Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a r | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-39711 | 22.7R1.1 – < 22.7R1.1 | Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-39710 | 22.7R1.1 – < 22.7R1.1 | Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a r | CRITICAL 9.1 | 1.9 % | ||
| CVE-2024-39709 | 22.7R1 – < 22.7R1 | Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version | HIGH 7.8 | 0.3 % | ||
| CVE-2024-38656 | 22.7R1.2 – < 22.7R1.2 | Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a r | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-38655 | 22.7R1.1 – < 22.7R1.1 ; 9.1R18.9 – < 9.1R18.9 | Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18 | CRITICAL 9.1 | 1.7 % | ||
| CVE-2024-11004 | fixed in 22.7R1.1 | Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthentica | MEDIUM 6.1 | 0.9 % | ||
| CVE-2024-11005 | fixed in 22.7R1.1 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1. | CRITICAL 9.1 | 1.6 % | ||
| CVE-2024-11006 | fixed in 22.7R1.1 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1. | CRITICAL 9.1 | 1.6 % | ||
| CVE-2024-11007 | fixed in 22.7R1.1 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1. | CRITICAL 9.1 | 1.6 % | ||
| CVE-2024-8495 | fixed in 22.7R1.1 | A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote | HIGH 7.5 | 1.4 % | ||
| CVE-2024-47909 | fixed in 22.7R1.2 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a rem | MEDIUM 4.9 | 1.1 % | ||
| CVE-2024-47906 | fixed in 22.7R1.2 | Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before versi | HIGH 7.8 | 0.2 % | ||
| CVE-2024-9420 | fixed in 22.7R1.2 | A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a r | HIGH 8.8 | 1.4 % | ||
| CVE-2024-47905 | fixed in 22.7R1.2 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a rem | MEDIUM 4.9 | 1.1 % | ||
| CVE-2024-37404 | 22.7R1.1 – < 22.7R1.1 | Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 | CRITICAL 9.1 | 71 % | ||
| CVE-2024-29205 | 22.5R1.3 – < 22.5R1.3 ; 9.1R18.5 – < 9.1R18.5 ; 9.1R17.4 – < 9.1R17.4 ; … | An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti P | HIGH 7.5 | 1.6 % | ||
| CVE-2024-21894 | 22.4R1.2 – < 22.4R1.2 ; 22.6R1.2 – < 22.6R1.2 ; 9.1R16.4 – < 9.1R16.4 ; … | A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated mal | CRITICAL 9.8 | 19 % | ||
| CVE-2024-22053 | 22.4R1.2 – < 22.4R1.2 ; 22.5R1.3 – < 22.5R1.3 ; 22.6R1.2 – < 22.6R1.2 ; … | A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated mal | HIGH 8.2 | 3.5 % | ||
| CVE-2024-22052 | 22.4R1.2 – < 22.4R1.2 ; 22.5R1.3 – < 22.5R1.3 ; 22.6R1.2 – < 22.6R1.2 ; … | A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthen | HIGH 7.5 | 3.8 % | ||
| CVE-2024-22023 | 22.4R1.2 – < 22.4R1.2 ; 22.5R1.3 – < 22.5R1.3 ; 22.6R1.2 – < 22.6R1.2 ; … | An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unaut | MEDIUM 5.3 | 3.0 % |