| CVE-2026-118527 |
Exploited
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
|
4.3
Medium
|
Nov 3, 2026 |
| CVE-2026-111357 |
Exploited
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
|
7.0
High
|
Oct 15, 2026 |
| CVE-2026-104935 |
Exploited
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
|
8.6
High
|
Oct 13, 2026 |
| CVE-2025-55144 |
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti…
|
5.4
Medium
|
Sep 9, 2025 |
| CVE-2025-55143 |
Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,…
|
6.1
Medium
|
Sep 9, 2025 |
| CVE-2025-55142 |
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti…
|
8.8
High
|
Sep 9, 2025 |
| CVE-2025-55141 |
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti…
|
8.8
High
|
Sep 9, 2025 |
| CVE-2025-55139 |
SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before…
|
6.8
Medium
|
Sep 9, 2025 |
| CVE-2025-55148 |
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti…
|
7.6
High
|
Sep 9, 2025 |
| CVE-2025-55147 |
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before…
|
8.8
High
|
Sep 9, 2025 |
| CVE-2025-55146 |
An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,…
|
4.9
Medium
|
Sep 9, 2025 |
| CVE-2025-8711 |
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before…
|
5.4
Medium
|
Sep 9, 2025 |
| CVE-2025-5468 |
Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure…
|
5.5
Medium
|
Aug 12, 2025 |
| CVE-2025-5466 |
XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway…
|
4.9
Medium
|
Aug 12, 2025 |
| CVE-2025-5462 |
A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,…
|
7.5
High
|
Aug 12, 2025 |
| CVE-2025-5456 |
A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before…
|
7.5
High
|
Aug 12, 2025 |
| CVE-2025-0292 |
SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote…
|
5.5
Medium
|
Jul 8, 2025 |
| CVE-2025-0293 |
CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5…
|
6.6
Medium
|
Jul 8, 2025 |
| CVE-2025-5464 |
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local…
|
6.5
Medium
|
Jul 8, 2025 |
| CVE-2025-5463 |
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy…
|
5.5
Medium
|
Jul 8, 2025 |
| CVE-2025-5451 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version…
|
4.9
Medium
|
Jul 8, 2025 |
| CVE-2025-5450 |
Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and…
|
6.3
Medium
|
Jul 8, 2025 |
| CVE-2025-22457 |
Exploited
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
|
9.0
Critical
|
Apr 3, 2025 |
| CVE-2024-38657 |
External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Feb 21, 2025 |
| CVE-2024-13843 |
Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before…
|
6.0
Medium
|
Feb 11, 2025 |