Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*

part: a version: 9.1 update: r4.3

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductConnect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0283 vulnerable 2026-06-08 07:02:24.190692 Details available
HIGH (7)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.
Published: 2025-01-08T22:15:59.822Z
Updated: 2026-02-26T19:09:31.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9420 vulnerable 2026-06-08 07:00:27.344141 Details available
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution
Published: 2024-11-12T15:57:24.947Z
Updated: 2025-03-13T15:31:10.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37404 vulnerable 2026-06-08 06:39:47.487520 Details available
CRITICAL (9.1)
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution.
Published: 2024-10-18T23:06:49.502Z
Updated: 2024-10-21T17:22:47.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22053 vulnerable 2026-06-08 06:29:33.504544 Details available
HIGH (8.2)
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain conditions read contents from memory.
Published: 2024-04-04T19:45:10.175Z
Updated: 2024-10-03T21:40:00.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22052 vulnerable 2026-06-08 06:29:33.494289 Details available
HIGH (7.5)
A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack
Published: 2024-04-04T19:45:10.169Z
Updated: 2024-10-03T21:40:23.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22023 vulnerable 2026-06-08 06:29:33.305013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21894 vulnerable 2026-06-08 06:29:32.332682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21893 vulnerable 2026-06-08 06:27:37.043654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21888 vulnerable 2026-06-08 06:27:37.016491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21887 vulnerable 2026-06-08 06:27:36.965369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46805 vulnerable 2026-06-08 06:14:23.362277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41719 vulnerable 2026-06-08 06:11:06.783435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39340 vulnerable 2026-06-08 06:09:37.127605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35258 vulnerable 2026-06-08 05:46:04.435757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35254 vulnerable 2026-06-08 05:46:04.387655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21826 vulnerable 2026-06-08 05:40:02.510613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44720 vulnerable 2026-06-08 05:36:46.841240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22965 vulnerable 2026-06-08 05:30:02.036486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22900 vulnerable 2026-06-08 05:30:01.822326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22899 vulnerable 2026-06-08 05:30:01.811415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22894 vulnerable 2026-06-08 05:30:01.791652 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22893 vulnerable 2026-06-08 05:30:01.778977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8260 vulnerable 2026-06-08 05:27:15.447703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8256 vulnerable 2026-06-08 05:27:15.433468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8243 vulnerable 2026-06-08 05:27:15.395003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8238 vulnerable 2026-06-08 05:27:15.360547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8222 vulnerable 2026-06-08 05:27:15.304947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8221 vulnerable 2026-06-08 05:27:15.302952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8220 vulnerable 2026-06-08 05:27:15.301570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8219 vulnerable 2026-06-08 05:27:15.299882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8218 vulnerable 2026-06-08 05:27:15.289325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8217 vulnerable 2026-06-08 05:27:15.287602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8216 vulnerable 2026-06-08 05:27:15.285849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8206 vulnerable 2026-06-08 05:27:15.235113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8204 vulnerable 2026-06-08 05:27:15.208100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15352 vulnerable 2026-06-08 05:19:25.705938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12880 vulnerable 2026-06-08 05:17:59.507320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.