Ivanti Connect Secure
Approved changes feed: RSS · Atom
cpe:2.3:a:ivanti:connect_secure:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Ivanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129) |
|---|---|
| Product | Connect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9420 |
vulnerable | 2026-06-08 07:00:27.309829 |
Details available
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9
and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution
Published: 2024-11-12T15:57:24.947Z
Updated: 2025-03-13T15:31:10.970Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39709 |
vulnerable | 2026-06-08 06:41:51.428678 |
Details available
HIGH (7.8)
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.
Published: 2024-11-13T01:54:45.448Z
Updated: 2024-11-23T21:06:04.916Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38656 |
vulnerable | 2026-06-08 06:41:47.877326 |
Details available
CRITICAL (9.1)
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2024-11-13T01:54:45.445Z
Updated: 2024-12-01T18:25:55.799Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38649 |
vulnerable | 2026-06-08 06:41:47.832026 |
Details available
HIGH (7.5)
An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated attacker to cause a denial of service.
Published: 2024-11-13T01:54:45.457Z
Updated: 2024-11-23T21:06:04.739Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37400 |
vulnerable | 2026-06-08 06:39:47.430559 |
Details available
HIGH (7.5)
An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial of service.
Published: 2024-11-13T01:54:45.506Z
Updated: 2024-11-13T16:57:19.557Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11005 |
vulnerable | 2026-06-08 06:23:48.384162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11004 |
vulnerable | 2026-06-08 06:23:48.382394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11478 |
vulnerable | 2026-06-08 05:12:37.242168 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11477 |
vulnerable | 2026-06-08 05:12:37.236166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.