| CVE-2024-39712 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-39711 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-39710 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-39709 |
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy…
|
7.8
High
|
Nov 13, 2024 |
| CVE-2024-38655 |
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version…
|
9.1
Critical
|
Nov 13, 2024 |
| CVE-2024-11004 |
Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a…
|
6.1
Medium
|
Nov 12, 2024 |
| CVE-2024-11005 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-11006 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-11007 |
Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure…
|
9.1
Critical
|
Nov 12, 2024 |
| CVE-2024-8495 |
A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version…
|
7.5
High
|
Nov 12, 2024 |
| CVE-2024-47906 |
Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy…
|
7.8
High
|
Nov 12, 2024 |
| CVE-2024-9420 |
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before…
|
8.8
High
|
Nov 12, 2024 |
| CVE-2024-37404 |
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy…
|
9.1
Critical
|
Oct 18, 2024 |
| CVE-2024-29205 |
An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure…
|
7.5
High
|
Apr 24, 2024 |
| CVE-2024-21894 |
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an…
|
8.2
High
|
Apr 4, 2024 |
| CVE-2024-22052 |
A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy…
|
7.5
High
|
Apr 4, 2024 |
| CVE-2024-22053 |
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an…
|
8.2
High
|
Apr 4, 2024 |
| CVE-2024-22023 |
An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy…
|
5.3
Medium
|
Apr 4, 2024 |
| CVE-2024-21893 |
Exploited
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
|
8.2
High
|
Jan 31, 2024 |
| CVE-2024-21888 |
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure…
|
8.8
High
|
Jan 31, 2024 |