Product · ivanti

Connect Secure

65 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

Medium 4.3

CVE-2026-118527 Exploited

Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticat…

ivanti Connect Secure Network devices

Nov 3, 2026
KEV Oct 30, 2026
Medium 5.4

CVE-2025-55144

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti …

ivanti Connect Secure Policy Secure ZTA Gateway Network devices

Sep 9, 2025
Medium 6.1

CVE-2025-55143

Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivan…

ivanti Connect Secure Policy Secure ZTA Gateway Network devices

Sep 9, 2025
Medium 6.8

CVE-2025-55139

SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway befor…

ivanti Connect Secure Policy Secure ZTA Gateway Network devices

Sep 9, 2025
Medium 4.9

CVE-2025-55146

An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Iva…

ivanti Connect Secure Policy Secure ZTA Gateway Network devices

Sep 9, 2025
Medium 5.4

CVE-2025-8711

CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway befor…

ivanti Connect Secure Policy Secure ZTA Gateway Network devices

Sep 9, 2025
Medium 5.5

CVE-2025-5468

Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure be…

ivanti Connect Secure Policy Secure ZTA Gateway Network devices

Aug 12, 2025
Medium 4.9

CVE-2025-5466

XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before…

ivanti Connect Secure Policy Secure ZTA Gateway Network devices

Aug 12, 2025
Medium 5.5

CVE-2025-0292

SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote …

ivanti Connect Secure Policy Secure Network devices

Jul 8, 2025
Medium 6.6

CVE-2025-0293

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows…

ivanti Connect Secure Policy Secure Network devices

Jul 8, 2025
Medium 6.5

CVE-2025-5464

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local auth…

ivanti Connect Secure Network devices

Jul 8, 2025
Medium 5.5

CVE-2025-5463

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy S…

ivanti Connect Secure Policy Secure Network devices

Jul 8, 2025
Medium 4.9

CVE-2025-5451

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version …

ivanti Connect Secure Policy Secure Network devices

Jul 8, 2025
Medium 6.3

CVE-2025-5450

Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Iv…

ivanti Connect Secure Policy Secure Network devices

Jul 8, 2025
Medium 6.0

CVE-2024-13843

Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before versi…

ivanti Connect Secure Policy Secure Network devices

Feb 11, 2025
Medium 6.0

CVE-2024-13842

A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allow…

ivanti Connect Secure Policy Secure Network devices

Feb 11, 2025
Medium 6.1

CVE-2024-13830

Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows …

ivanti Connect Secure Policy Secure Network devices

Feb 11, 2025
Medium 6.8

CVE-2024-12058

External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before versio…

ivanti Connect Secure Policy Secure Network devices

Feb 11, 2025
Medium 6.1

CVE-2024-11004

Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows …

ivanti Connect Secure Policy Secure Network devices

Nov 12, 2024
Medium 4.9

CVE-2024-47909

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version …

ivanti Connect Secure Policy Secure Network devices

Nov 12, 2024
Medium 4.9

CVE-2024-47905

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version …

ivanti Connect Secure Policy Secure Network devices

Nov 12, 2024
Medium 5.3

CVE-2024-22023

An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy S…

ivanti Connect Secure Policy Secure Network devices

Apr 4, 2024