7.5
High
CVE-2024-8495 A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version…
Description
A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Connect Secure 22.7 | earliest → < 22.7R2.1 | 22.7R2.1 |
| Policy Secure 22.7 | earliest → < 22.7R1.1 | 22.7R1.1 |
| connect_secure | 22.7r2.1 | No fix stated |
| policy_secure | 22.7r1.1 | No fix stated |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Connect Secure
The 65 CVEs of Connect Secure →
CVE-2026-118527
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
4.3
Medium
CVE-2026-111357
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
7.0
High
CVE-2026-104935
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
8.6
High
CVE-2025-55144
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti…
5.4
Medium