Aller au contenu

Vulnérabilités de Ivanti Connect Secure

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-118527 Exploitée Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability 4.3 Moyenne 3 nov. 2026
CVE-2026-111357 Exploitée Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability 7.0 Élevée 15 oct. 2026
CVE-2026-104935 Exploitée Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability 8.6 Élevée 13 oct. 2026
CVE-2025-55144 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 5.4 Moyenne 9 sept. 2025
CVE-2025-55143 Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,… 6.1 Moyenne 9 sept. 2025
CVE-2025-55142 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 8.8 Élevée 9 sept. 2025
CVE-2025-55141 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 8.8 Élevée 9 sept. 2025
CVE-2025-55139 SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before… 6.8 Moyenne 9 sept. 2025
CVE-2025-55148 Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti… 7.6 Élevée 9 sept. 2025
CVE-2025-55147 CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before… 8.8 Élevée 9 sept. 2025
CVE-2025-55146 An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,… 4.9 Moyenne 9 sept. 2025
CVE-2025-8711 CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before… 5.4 Moyenne 9 sept. 2025
CVE-2025-5468 Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure… 5.5 Moyenne 12 août 2025
CVE-2025-5466 XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway… 4.9 Moyenne 12 août 2025
CVE-2025-5462 A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,… 7.5 Élevée 12 août 2025
CVE-2025-5456 A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before… 7.5 Élevée 12 août 2025
CVE-2025-0292 SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote… 5.5 Moyenne 8 juil. 2025
CVE-2025-0293 CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5… 6.6 Moyenne 8 juil. 2025
CVE-2025-5464 Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local… 6.5 Moyenne 8 juil. 2025
CVE-2025-5463 Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy… 5.5 Moyenne 8 juil. 2025
CVE-2025-5451 A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version… 4.9 Moyenne 8 juil. 2025
CVE-2025-5450 Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and… 6.3 Moyenne 8 juil. 2025
CVE-2025-22457 Exploitée Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability 9.0 Critique 3 avr. 2025
CVE-2024-38657 External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version… 9.1 Critique 21 févr. 2025
CVE-2024-13843 Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before… 6.0 Moyenne 11 févr. 2025

Autres produits Ivanti