Ivanti Connect Secure 9.1 R8.4
Approved changes feed: RSS · Atom
cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:*
part: a version: 9.1 update: r8.4
| Vendor | Ivanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129) |
|---|---|
| Product | Connect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9420 |
vulnerable | 2026-06-08 07:00:27.352533 |
Details available
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9
and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution
Published: 2024-11-12T15:57:24.947Z
Updated: 2025-03-13T15:31:10.970Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37404 |
vulnerable | 2026-06-08 06:39:47.492329 |
Details available
CRITICAL (9.1)
Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution.
Published: 2024-10-18T23:06:49.502Z
Updated: 2024-10-21T17:22:47.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41719 |
vulnerable | 2026-06-08 06:11:06.788062 |
Details available
HIGH (7.2)
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution.
Published: 2023-12-14T01:56:44.867Z
Updated: 2024-08-02T19:01:35.464Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39340 |
vulnerable | 2026-06-08 06:09:37.135176 |
Details available
HIGH (7.5)
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service (DoS) of the appliance.
Published: 2023-12-16T01:49:21.623Z
Updated: 2024-11-27T15:14:36.145Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35258 |
vulnerable | 2026-06-08 05:46:04.436150 |
Details available
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.
Published: 2022-12-05T00:00:00.000Z
Updated: 2024-08-03T09:29:17.434Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35254 |
vulnerable | 2026-06-08 05:46:04.395115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21826 |
vulnerable | 2026-06-08 05:40:02.517434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22965 |
vulnerable | 2026-06-08 05:30:02.036705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22900 |
vulnerable | 2026-06-08 05:30:01.822445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22899 |
vulnerable | 2026-06-08 05:30:01.811615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22894 |
vulnerable | 2026-06-08 05:30:01.791770 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22893 |
vulnerable | 2026-06-08 05:30:01.783531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8260 |
vulnerable | 2026-06-08 05:27:15.452916 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.