| CVE-2024-13842 |
A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows…
|
6.0
Moyenne
|
11 févr. 2025 |
| CVE-2024-13830 |
Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a…
|
6.1
Moyenne
|
11 févr. 2025 |
| CVE-2024-12058 |
External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version…
|
6.8
Moyenne
|
11 févr. 2025 |
| CVE-2024-10644 |
Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3…
|
9.1
Critique
|
11 févr. 2025 |
| CVE-2025-22467 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to…
|
9.9
Critique
|
11 févr. 2025 |
| CVE-2025-0283 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version…
|
7.0
Élevée
|
8 janv. 2025 |
| CVE-2025-0282 |
Exploitée
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
|
9.0
Critique
|
8 janv. 2025 |
| CVE-2024-37377 |
A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated…
|
7.5
Élevée
|
11 déc. 2024 |
| CVE-2024-37401 |
An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker…
|
7.5
Élevée
|
11 déc. 2024 |
| CVE-2024-11634 |
Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2…
|
9.1
Critique
|
10 déc. 2024 |
| CVE-2024-11633 |
Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin…
|
9.1
Critique
|
10 déc. 2024 |
| CVE-2024-9844 |
Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4…
|
7.1
Élevée
|
10 déc. 2024 |
| CVE-2024-39712 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39711 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39710 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-39709 |
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy…
|
7.8
Élevée
|
13 nov. 2024 |
| CVE-2024-38656 |
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-38655 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critique
|
13 nov. 2024 |
| CVE-2024-38649 |
An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a…
|
7.5
Élevée
|
13 nov. 2024 |
| CVE-2024-37400 |
An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to…
|
7.5
Élevée
|
13 nov. 2024 |
| CVE-2024-11004 |
Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a…
|
6.1
Moyenne
|
12 nov. 2024 |
| CVE-2024-11005 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-11006 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-11007 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critique
|
12 nov. 2024 |
| CVE-2024-8495 |
A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version…
|
7.5
Élevée
|
12 nov. 2024 |