Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*

part: a version: 9.1 update: r7

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductConnect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9420 vulnerable 2026-06-08 07:00:27.347943 Details available
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution
Published: 2024-11-12T15:57:24.947Z
Updated: 2025-03-13T15:31:10.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37404 vulnerable 2026-06-08 06:39:47.489386 Details available
CRITICAL (9.1)
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution.
Published: 2024-10-18T23:06:49.502Z
Updated: 2024-10-21T17:22:47.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22053 vulnerable 2026-06-08 06:29:33.504807 Details available
HIGH (8.2)
A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack or in certain conditions read contents from memory.
Published: 2024-04-04T19:45:10.175Z
Updated: 2024-10-03T21:40:00.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22052 vulnerable 2026-06-08 06:29:33.494462 Details available
HIGH (7.5)
A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack
Published: 2024-04-04T19:45:10.169Z
Updated: 2024-10-03T21:40:23.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22023 vulnerable 2026-06-08 06:29:33.305210 Details available
MEDIUM (5.3)
An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially crafted XML requests in-order-to temporarily cause resource exhaustion thereby resulting in a limited-time DoS.
Published: 2024-04-04T19:45:10.162Z
Updated: 2024-10-03T21:38:58.416Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21894 vulnerable 2026-06-08 06:29:32.341976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21893 vulnerable 2026-06-08 06:27:37.043704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21888 vulnerable 2026-06-08 06:27:37.016545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21887 vulnerable 2026-06-08 06:27:36.966853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46805 vulnerable 2026-06-08 06:14:23.373230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41719 vulnerable 2026-06-08 06:11:06.785449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39340 vulnerable 2026-06-08 06:09:37.130973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35258 vulnerable 2026-06-08 05:46:04.436044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35254 vulnerable 2026-06-08 05:46:04.390939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21826 vulnerable 2026-06-08 05:40:02.513310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44720 vulnerable 2026-06-08 05:36:46.847696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22965 vulnerable 2026-06-08 05:30:02.036542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22900 vulnerable 2026-06-08 05:30:01.822377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22899 vulnerable 2026-06-08 05:30:01.811463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22894 vulnerable 2026-06-08 05:30:01.791702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-22893 vulnerable 2026-06-08 05:30:01.780769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8262 vulnerable 2026-06-08 05:27:15.455091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8261 vulnerable 2026-06-08 05:27:15.453915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8256 vulnerable 2026-06-08 05:27:15.433517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8243 vulnerable 2026-06-08 05:27:15.395142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8238 vulnerable 2026-06-08 05:27:15.360692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8222 vulnerable 2026-06-08 05:27:15.305161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8221 vulnerable 2026-06-08 05:27:15.303096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8220 vulnerable 2026-06-08 05:27:15.301619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8219 vulnerable 2026-06-08 05:27:15.300107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8218 vulnerable 2026-06-08 05:27:15.289475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8217 vulnerable 2026-06-08 05:27:15.287740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8216 vulnerable 2026-06-08 05:27:15.286001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8206 vulnerable 2026-06-08 05:27:15.235480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8204 vulnerable 2026-06-08 05:27:15.210572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15352 vulnerable 2026-06-08 05:19:25.708046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12880 vulnerable 2026-06-08 05:17:59.509401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.