Ivanti Secure Access Client

Name: Ivanti Secure Access Client
Brand: Ivanti

ProduktRU

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

KEV-gelistet

kritisch

nach Schweregrad

0critical17high6medium1low

aktualisiert 2026-10-28

Schwachstellen (36)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2023-38041US	high7.0	0.74% (54th)	Exploit	22.6R1	2023-10-25	2 Versionen
CVE-2023-35080US	high7.8OT erhöht	0.71% (53rd)	Exploit	22.6.1.1	2023-11-15	3 Versionen
CVE-2024-47908US	high7.2	22.3% (98th)	—	22.7R4	2025-02-11	< 22.7R4
CVE-2024-37400US	—	2.10% (82nd)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-38649US	high7.5	1.94% (80th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-39710US	—	1.89% (79th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-38655US	high7.2	1.73% (78th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-39712US	—	1.73% (78th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-39711US	—	1.73% (78th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-38656US	—	1.73% (78th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-11006US	high7.2	1.64% (76th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-11005US	high7.2	1.64% (76th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-11007US	high7.2	1.64% (76th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-38657US	medium4.9	1.62% (76th)	—	22.7R4	2025-02-21	< 22.7R4
CVE-2024-47907US	high7.5	1.56% (75th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-9420US	high8.8	1.43% (73rd)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-8495US	high7.5	1.40% (72nd)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-47909US	medium4.9	1.10% (65th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-47905US	medium4.9	1.10% (65th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-11004US	medium6.1	0.91% (60th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2026-8992US	—	0.56% (47th)	—	22.8R6	2026-05-22	< 22.8R6
CVE-2023-38042US	—	0.34% (28th)	—	22.7R1	2024-05-31	2 Versionen
CVE-2024-37398US	high7.8	0.32% (25th)	—	22.7R4	2024-11-13	3 Versionen
CVE-2023-46810US	—	0.31% (24th)	—	kein Fix	2024-05-31	≤ 22.7R1
CVE-2025-22454US	—	0.30% (23rd)	—	22.7R4	2025-03-11	7 Versionen
CVE-2024-29211US	medium4.7	0.30% (22nd)	—	22.7R4	2024-11-13	3 Versionen
CVE-2024-39709US	—OT erhöht	0.30% (22nd)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2026-7432US	high7.0	0.28% (21st)	—	22.8R6	2026-05-12	2 Versionen
CVE-2024-38654US	—	0.28% (21st)	—	22.7R4	2024-11-13	3 Versionen
CVE-2024-7571US	high7.8	0.26% (18th)	—	22.7R4	2024-11-12	2 Versionen
CVE-2024-9843US	medium5.5	0.26% (17th)	—	22.7R4	2024-11-12	2 Versionen
CVE-2024-47906US	high7.8	0.22% (13th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-8539US	high7.1	0.22% (12th)	—	22.7R4	2024-11-12	2 Versionen
CVE-2024-13813US	high7.1	0.21% (11th)	—	22.8R1	2025-02-11	2 Versionen
CVE-2024-9842US	low3.3	0.21% (11th)	—	22.7R4	2024-11-12	2 Versionen
CVE-2026-7431US	—	0.18% (7th)	—	22.8R6	2026-05-12	2 Versionen

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-267Privilege Defined With Unsafe Actions5 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource5 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs

Datenquellen (4)

Welche Quellen diesen Datensatz belegen und wann.

DECERT-Bund (BSI CSAF)31 CVEs
EUEU Vulnerability Database (ENISA)15 CVEs
RUBDU (FSTEC Data Security Threats Database)8 CVEs
NLNCSC-NL (CSAF)1 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan