| CVE-2024-13842 |
A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows…
|
6.0
Medium
|
Feb 11, 2025 |
| CVE-2024-13830 |
Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a…
|
6.1
Medium
|
Feb 11, 2025 |
| CVE-2024-12058 |
External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version…
|
6.8
Medium
|
Feb 11, 2025 |
| CVE-2024-10644 |
Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3…
|
9.1
Critical
|
Feb 11, 2025 |
| CVE-2025-22467 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to…
|
9.9
Critical
|
Feb 11, 2025 |
| CVE-2025-0283 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version…
|
7.0
High
|
Jan 8, 2025 |
| CVE-2025-0282 |
Exploited
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
|
9.0
Critical
|
Jan 8, 2025 |
| CVE-2024-37377 |
A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated…
|
7.5
High
|
Dec 11, 2024 |
| CVE-2024-37401 |
An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker…
|
7.5
High
|
Dec 11, 2024 |
| CVE-2024-11634 |
Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2…
|
9.1
Critical
|
Dec 10, 2024 |
| CVE-2024-11633 |
Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin…
|
9.1
Critical
|
Dec 10, 2024 |
| CVE-2024-9844 |
Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4…
|
7.1
High
|
Dec 10, 2024 |
| CVE-2024-39712 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-39711 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-39710 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-39709 |
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-38656 |
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-38655 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-38649 |
An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a…
|
7.5
High
|
Nov 13, 2024 |
| CVE-2024-37400 |
An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to…
|
7.5
High
|
Nov 13, 2024 |
| CVE-2024-11004 |
Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a…
|
6.1
Medium
|
Nov 12, 2024 |
| CVE-2024-11005 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-11006 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-11007 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-8495 |
A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version…
|
7.5
High
|
Nov 12, 2024 |