Skip to content
OpenAdvisories

Product · ConnectWise

ScreenConnect

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-3935 Exploited

    ScreenConnect Exposure to ASP.NET ViewState Code Injection

    ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web Forms use ViewState to preserve page and control state, with data encoded using Base64 protected by machine keys.  It is important to note …

    ConnectWise ScreenConnect
    KEV Jun 2, 2025
  • High 8.4
    CVE-2024-1708 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    Improper limitation of a pathname to a restricted directory (“path traversal”)

    ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems.

    ConnectWise ScreenConnect
    KEV Apr 28, 2026