Ivanti Connect Secure 9.1 R11.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*
part: a version: 9.1 update: r11.0
| Vendor | Ivanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129) |
|---|---|
| Product | Connect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0283 |
vulnerable | 2026-06-08 07:02:24.162024 |
Details available
HIGH (7)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.
Published: 2025-01-08T22:15:59.822Z
Updated: 2026-02-26T19:09:31.728Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9420 |
vulnerable | 2026-06-08 07:00:27.318198 |
Details available
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9
and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution
Published: 2024-11-12T15:57:24.947Z
Updated: 2025-03-13T15:31:10.970Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37404 |
vulnerable | 2026-06-08 06:39:47.453409 |
Details available
CRITICAL (9.1)
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution.
Published: 2024-10-18T23:06:49.502Z
Updated: 2024-10-21T17:22:47.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39340 |
vulnerable | 2026-06-08 06:09:37.096681 |
Details available
HIGH (7.5)
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service (DoS) of the appliance.
Published: 2023-12-16T01:49:21.623Z
Updated: 2024-11-27T15:14:36.145Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35258 |
vulnerable | 2026-06-08 05:46:04.434722 |
Details available
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.
Published: 2022-12-05T00:00:00.000Z
Updated: 2024-08-03T09:29:17.434Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35254 |
vulnerable | 2026-06-08 05:46:04.372506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21826 |
vulnerable | 2026-06-08 05:40:02.498811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44720 |
vulnerable | 2026-06-08 05:36:46.835496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22965 |
vulnerable | 2026-06-08 05:30:02.034303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22938 |
vulnerable | 2026-06-08 05:30:01.974769 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22937 |
vulnerable | 2026-06-08 05:30:01.974135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22936 |
vulnerable | 2026-06-08 05:30:01.973481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22935 |
vulnerable | 2026-06-08 05:30:01.972807 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22934 |
vulnerable | 2026-06-08 05:30:01.972228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22933 |
vulnerable | 2026-06-08 05:30:01.966173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22908 |
vulnerable | 2026-06-08 05:30:01.841726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22900 |
vulnerable | 2026-06-08 05:30:01.822194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22899 |
vulnerable | 2026-06-08 05:30:01.811182 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22894 |
vulnerable | 2026-06-08 05:30:01.791511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22893 |
vulnerable | 2026-06-08 05:30:01.774157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.