Ivanti Connect Secure vulnerabilities, page 5
134 vulnerabilities
Known vulnerabilities in Ivanti Connect Secure, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2024-21894ivanti · connect_secure +1 moreivanti connect_secureA heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary codeEPSS18.99%MediumCVE-2024-13830ivanti · connect_secure +1 moreivanti connect_secureReflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required.EPSS0.74%MediumCVE-2024-13843ivanti · connect_secure +1 moreivanti connect_secureCleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data.EPSS0.36%MediumCVE-2024-13842ivanti · connect_secure +1 moreivanti connect_secureA hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data.EPSS0.32%MediumCVE-2024-11004ivanti · connect_secure +1 moreivanti connect_secureReflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is required.EPSS0.91%CriticalCVE-2024-11005ivanti · connect_secure +1 moreivanti connect_secureCommand injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code execution.EPSS1.64%CriticalCVE-2024-11007ivanti · connect_secure +1 moreivanti connect_secureCommand injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code execution.EPSS1.64%CriticalCVE-2024-11633ivanti · connect_secureivanti connect_secureArgument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker with admin privileges to achieve remote code executionEPSS1.69%CriticalCVE-2024-11006ivanti · connect_secure +1 moreivanti connect_secureCommand injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.1 (Not Applicable to 9.1Rx) allows a remote authenticated attacker with admin privileges to achieve remote code execution.EPSS1.64%CriticalCVE-2024-11634ivanti · connect_secure +1 moreivanti connect_secureCommand injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. (Not applicable to 9.1Rx)EPSS1.84%HighCVE-2024-47906ivanti · connect_secure +1 moreivanti connect_secureExcessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.2 (Not Applicable to 9.1Rx) allows a local authenticated attacker to escalate privileges.EPSS0.22%MediumCVE-2024-47909ivanti · connect_secure +1 moreivanti connect_secureA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service.EPSS1.10%MediumCVE-2024-47905ivanti · connect_secure +1 moreivanti connect_secureA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of service.EPSS1.10%HighCVE-2024-47907ivanti · connect_secureivanti connect_secureA stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of service.EPSS1.56%HighCVE-2024-9844ivanti · connect_secureivanti connect_secureInsufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions.EPSS0.99%HighCVE-2024-9420ivanti · connect_secure +1 moreivanti connect_secureA use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9
and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code executionEPSS1.43%HighCVE-2024-39709ivanti · connect_secure +1 moreivanti connect_secureIncorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.EPSS0.30%CriticalCVE-2024-39711ivanti · connect_secure +1 moreivanti connect_secureArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.EPSS1.73%CriticalCVE-2024-39712ivanti · connect_secure +1 moreivanti connect_secureArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.EPSS1.73%CriticalCVE-2024-39710ivanti · connect_secure +1 moreivanti connect_secureArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.EPSS1.89%