Ivanti Connect Secure 22.7 R2.2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:*:*:*:*:*:*

part: a version: 22.7 update: r2.2

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductConnect Secure (61f5b622-21c4-5d14-b120-bd5f32132cfb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8712 vulnerable 2026-06-03 15:13:44.584669 Details available
MEDIUM (5.4)
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.
Published: 2025-09-09T15:12:38.985Z
Updated: 2025-09-10T17:25:48.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8711 vulnerable 2026-06-03 15:13:44.564177 Details available
MEDIUM (5.4)
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to execute limited actions on behalf of the victim user. User interaction is required.
Published: 2025-09-09T15:17:25.292Z
Updated: 2025-09-09T17:32:23.793Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5468 vulnerable 2026-06-03 15:07:53.684957 Details available
MEDIUM (5.5)
Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a local authenticated attacker to read arbitrary files on disk.
Published: 2025-08-12T15:05:23.222Z
Updated: 2025-08-12T18:58:34.165Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5466 vulnerable 2026-06-03 15:07:53.664648 Details available
MEDIUM (4.9)
XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to trigger a denial of service
Published: 2025-08-12T15:00:05.978Z
Updated: 2025-08-12T19:00:58.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5464 vulnerable 2026-06-03 15:07:53.662559 Details available
MEDIUM (6.5)
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information.
Published: 2025-07-08T15:32:32.212Z
Updated: 2025-07-08T15:57:58.608Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5463 vulnerable 2026-06-03 15:07:53.655541 Details available
MEDIUM (5.5)
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information.
Published: 2025-07-08T15:02:38.657Z
Updated: 2025-07-08T20:39:29.302Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5462 vulnerable 2026-06-03 15:07:53.653479 Details available
HIGH (7.5)
A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service.
Published: 2025-08-12T14:56:19.798Z
Updated: 2025-08-12T15:08:46.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5456 vulnerable 2026-06-03 15:07:53.637588 Details available
HIGH (7.5)
A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service. CWE-125
Published: 2025-08-12T14:50:46.329Z
Updated: 2025-08-12T15:05:53.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5451 vulnerable 2026-06-03 15:07:53.336087 Details available
MEDIUM (4.9)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to trigger a denial of service.
Published: 2025-07-08T15:02:00.522Z
Updated: 2025-07-08T20:43:37.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-5450 vulnerable 2026-06-03 15:07:53.321627 Details available
MEDIUM (6.3)
Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated admin with read-only rights to modify settings that should be restricted.
Published: 2025-07-08T15:00:02.314Z
Updated: 2025-07-08T20:42:58.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55148 vulnerable 2026-06-03 15:04:57.766840 Details available
HIGH (7.6)
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.
Published: 2025-09-09T15:37:45.415Z
Updated: 2025-09-09T17:31:58.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55147 vulnerable 2026-06-03 15:04:57.764975 Details available
HIGH (8.8)
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to execute sensitive actions on behalf of the victim user. User interaction is required
Published: 2025-09-09T15:32:25.940Z
Updated: 2026-02-26T17:49:03.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55146 vulnerable 2026-06-03 15:04:57.762590 Details available
MEDIUM (4.9)
An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to trigger a denial of service.
Published: 2025-09-09T15:28:10.038Z
Updated: 2025-09-09T17:32:12.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55145 vulnerable 2026-06-03 15:04:57.760951 Details available
HIGH (8.9)
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker to hijack existing HTML5 connections.
Published: 2025-09-09T15:22:05.340Z
Updated: 2026-02-26T17:49:03.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55144 vulnerable 2026-06-03 15:04:57.741912 Details available
MEDIUM (5.4)
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.
Published: 2025-09-09T15:55:30.629Z
Updated: 2025-09-09T17:31:23.981Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55143 vulnerable 2026-06-03 15:04:57.740189 Details available
MEDIUM (6.1)
Reflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to inject arbitrary text into a crafted HTTP response. User interaction is required.
Published: 2025-09-09T15:52:50.837Z
Updated: 2025-09-09T17:31:30.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55142 vulnerable 2026-06-03 15:04:57.738247 Details available
HIGH (8.8)
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings.
Published: 2025-09-09T15:49:20.192Z
Updated: 2026-02-26T17:49:02.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55141 vulnerable 2026-06-03 15:04:57.736208 Details available
HIGH (8.8)
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings.
Published: 2025-09-09T15:45:52.822Z
Updated: 2026-02-26T17:49:02.944Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55139 vulnerable 2026-06-03 15:04:57.720247 Details available
MEDIUM (6.8)
SSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to enumerate internal services.
Published: 2025-09-09T15:41:16.568Z
Updated: 2025-09-09T17:31:52.640Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22467 vulnerable 2026-06-03 14:59:40.030800 Details available
CRITICAL (9.9)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote authenticated attacker to achieve remote code execution.
Published: 2025-02-11T15:20:16.514Z
Updated: 2026-02-26T19:09:18.525Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22457 vulnerable 2026-06-03 14:59:39.992421 Details available
CRITICAL (9)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker to achieve remote code execution.
Published: 2025-04-03T15:20:23.628Z
Updated: 2026-02-26T18:28:57.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0293 vulnerable 2026-06-03 14:58:32.011731 Details available
MEDIUM (6.6)
CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk.
Published: 2025-07-08T15:33:05.165Z
Updated: 2025-07-08T16:02:46.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0292 vulnerable 2026-06-03 14:58:32.004933 Details available
MEDIUM (5.5)
SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to access internal network services.
Published: 2025-07-08T15:33:24.245Z
Updated: 2025-07-09T20:48:09.166Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0283 vulnerable 2026-06-03 14:58:31.954073 Details available
HIGH (7)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.
Published: 2025-01-08T22:15:59.822Z
Updated: 2026-02-26T19:09:31.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0282 vulnerable 2026-06-03 14:58:31.918799 Details available
CRITICAL (9)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.
Published: 2025-01-08T22:15:09.386Z
Updated: 2025-10-21T22:55:33.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9844 vulnerable 2026-06-03 14:58:22.716691 Details available
HIGH (7.1)
Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions.
Published: 2024-12-10T18:46:56.314Z
Updated: 2024-12-10T20:39:59.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9420 vulnerable 2026-06-03 14:58:21.259866 Details available
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution
Published: 2024-11-12T15:57:24.947Z
Updated: 2025-03-13T15:31:10.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47909 vulnerable 2026-06-03 14:57:02.616697 Details available
MEDIUM (4.9)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service.
Published: 2024-11-12T16:02:28.451Z
Updated: 2024-11-19T17:10:28.514Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47907 vulnerable 2026-06-03 14:57:02.612993 Details available
HIGH (7.5)
A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.
Published: 2024-11-12T16:00:49.792Z
Updated: 2024-11-12T20:02:31.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47906 vulnerable 2026-06-03 14:57:02.608581 Details available
HIGH (7.8)
Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.2 (Not Applicable to 9.1Rx) allows a local authenticated attacker to escalate privileges.
Published: 2024-11-12T15:59:53.269Z
Updated: 2024-11-22T16:31:00.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47905 vulnerable 2026-06-03 14:57:02.605862 Details available
MEDIUM (4.9)
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service.
Published: 2024-11-12T15:56:13.827Z
Updated: 2024-11-12T18:35:42.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39712 vulnerable 2026-06-03 14:56:22.265995 Details available
CRITICAL (9.1)
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2024-11-13T01:54:45.518Z
Updated: 2024-12-01T18:25:55.739Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39711 vulnerable 2026-06-03 14:56:22.265239 Details available
CRITICAL (9.1)
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2024-11-13T01:54:45.452Z
Updated: 2024-12-01T18:25:55.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39710 vulnerable 2026-06-03 14:56:22.264622 Details available
CRITICAL (9.1)
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2024-11-13T01:54:45.384Z
Updated: 2024-12-01T18:25:55.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38657 vulnerable 2026-06-03 14:56:19.241811 Details available
CRITICAL (9.1)
External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to write arbitrary files.
Published: 2025-02-21T01:25:43.552Z
Updated: 2025-02-21T15:51:34.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38656 vulnerable 2026-06-03 14:56:19.241009 Details available
CRITICAL (9.1)
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2024-11-13T01:54:45.445Z
Updated: 2024-12-01T18:25:55.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38655 vulnerable 2026-06-03 14:56:19.237372 Details available
CRITICAL (9.1)
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2024-11-13T01:54:45.595Z
Updated: 2024-11-23T21:06:07.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37401 vulnerable 2026-06-03 14:56:06.493294 Details available
HIGH (7.5)
An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service.
Published: 2024-12-11T18:52:27.527Z
Updated: 2024-12-12T14:39:24.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37400 vulnerable 2026-06-03 14:56:06.490626 Details available
HIGH (7.5)
An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial of service.
Published: 2024-11-13T01:54:45.506Z
Updated: 2024-11-13T16:57:19.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37377 vulnerable 2026-06-03 14:56:06.430395 Details available
HIGH (7.5)
A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.
Published: 2024-12-11T18:52:27.462Z
Updated: 2024-12-12T14:46:24.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13843 vulnerable 2026-06-03 14:54:25.562763 Details available
MEDIUM (6)
Cleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data.
Published: 2025-02-11T15:26:32.029Z
Updated: 2025-02-11T16:00:53.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13842 vulnerable 2026-06-03 14:54:25.561952 Details available
MEDIUM (6)
A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data.
Published: 2025-02-11T15:25:49.528Z
Updated: 2025-02-11T16:00:24.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13830 vulnerable 2026-06-03 14:54:25.535485 Details available
MEDIUM (6.1)
Reflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required.
Published: 2025-02-11T15:22:15.945Z
Updated: 2025-02-11T15:35:20.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12058 vulnerable 2026-06-03 14:54:15.501187 Details available
MEDIUM (6.8)
External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to read arbitrary files.
Published: 2025-02-11T15:21:18.279Z
Updated: 2025-02-11T15:35:20.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11634 vulnerable 2026-06-03 14:54:14.518745 Details available
CRITICAL (9.1)
Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. (Not applicable to 9.1Rx)
Published: 2024-12-10T18:48:29.024Z
Updated: 2024-12-14T04:55:16.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11633 vulnerable 2026-06-03 14:54:14.518126 Details available
CRITICAL (9.1)
Argument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achieve remote code execution
Published: 2024-12-10T18:47:55.575Z
Updated: 2024-12-14T04:55:15.649Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10644 vulnerable 2026-06-03 14:54:12.243746 Details available
CRITICAL (9.1)
Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2025-02-11T15:20:46.680Z
Updated: 2026-02-26T19:09:17.981Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.