| CVE-2025-22457 |
Exploited
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
|
9.0
Critical
|
Apr 3, 2025 |
| CVE-2024-38657 |
External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Feb 21, 2025 |
| CVE-2024-10644 |
Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3…
|
9.1
Critical
|
Feb 11, 2025 |
| CVE-2025-22467 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to…
|
9.9
Critical
|
Feb 11, 2025 |
| CVE-2025-0282 |
Exploited
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
|
9.0
Critical
|
Jan 8, 2025 |
| CVE-2024-11634 |
Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2…
|
9.1
Critical
|
Dec 10, 2024 |
| CVE-2024-11633 |
Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin…
|
9.1
Critical
|
Dec 10, 2024 |
| CVE-2024-39712 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-39711 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-39710 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-38656 |
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-38655 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-11005 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-11006 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-11007 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-37404 |
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy…
|
9.1
Critical
|
Oct 18, 2024 |