Ivanti Connect Secure

Name: Ivanti Connect Secure
Brand: Ivanti

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical29high13medium3low

updated 2026-10-27

vulnerabilities (77)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21887US	critical9.1OT critical	100.0% (100th)	KEV	no fix	2024-01-12	43 versions
CVE-2024-21893US	high8.2OT critical	100.0% (100th)	KEV	no fix	2024-01-31	6 versions
CVE-2023-46805US	high8.2OT critical	100.0% (100th)	KEV	no fix	2024-01-12	43 versions
CVE-2025-22457US	critical9.8OT critical	100.0% (100th)	KEV	22.7R2.6	2025-04-03	3 versions
CVE-2025-0282US	critical9.0OT critical	100.0% (100th)	KEV	22.7R2.5	2025-01-08	3 versions
CVE-2026-104935US	—OT critical	86.8% (100th)	KEV	no fix	2026-10-13	4 versions
CVE-2024-22024US	high8.3	94.7% (100th)	Exploit	no fix	2024-02-13	5 versions
CVE-2024-37404US	high8.8	71.0% (99th)	Exploit	9.1R18.9	2024-10-18	7 versions
CVE-2024-21888US	high8.8	85.4% (100th)	—	no fix	2024-01-31	6 versions
CVE-2024-47908US	high7.2	22.3% (98th)	—	22.7R2.3	2025-02-11	< 22.7R2.3
CVE-2024-21894US	critical9.8	19.0% (97th)	—	22.4R2.4	2024-04-04	27 versions
CVE-2025-0283US	high7.0	17.5% (97th)	—	22.7R2.5	2025-01-08	4 versions
CVE-2025-22467US	high8.8	4.66% (92nd)	—	22.7R2.6	2025-02-11	3 versions
CVE-2024-22052US	high7.5	3.75% (90th)	—	9.1R16.4	2024-04-04	20 versions
CVE-2024-22053US	high8.2	3.53% (89th)	—	9.1R14.6	2024-04-04	20 versions
CVE-2023-41719US	high7.2	3.37% (89th)	—	22.6.1	2023-12-14	22.6.1 → 22.6.1
CVE-2024-22023US	medium5.3	3.00% (87th)	—	9.1R17.4	2024-04-04	20 versions
CVE-2024-10644US	high7.2	2.82% (86th)	—	22.7R2.6	2025-02-11	2 versions
CVE-2023-39340US	high7.5	2.38% (84th)	—	22.6.1	2023-12-16	22.6.1 → 22.6.1
CVE-2024-37400US	—	2.10% (82nd)	—	22.7R2.3	2024-11-13	3 versions
CVE-2024-38649US	high7.5	1.94% (80th)	—	22.7R2.3	2024-11-13	3 versions
CVE-2024-39710US	—	1.89% (79th)	—	22.7R2.3	2024-11-13	7 versions
CVE-2024-11634US	high7.2	1.84% (79th)	—	22.7R2.4	2024-12-10	2 versions
CVE-2024-37377US	—	1.81% (78th)	—	22.7R2.4	2024-12-12	2 versions
CVE-2024-38655US	high7.2	1.73% (77th)	—	22.7R2.3	2024-11-13	6 versions
CVE-2024-39712US	—	1.73% (77th)	—	22.7R2.3	2024-11-13	7 versions
CVE-2024-39711US	—	1.73% (77th)	—	22.7R2.3	2024-11-13	7 versions
CVE-2024-38656US	—	1.73% (77th)	—	22.7R2.3	2024-11-13	7 versions
CVE-2024-11633US	high7.2	1.69% (77th)	—	22.7R2.4	2024-12-10	2 versions
CVE-2024-11006US	high7.2	1.64% (76th)	—	22.7R2.3	2024-11-12	3 versions
CVE-2024-11005US	high7.2	1.64% (76th)	—	22.7R2.3	2024-11-12	3 versions
CVE-2024-11007US	high7.2	1.64% (76th)	—	22.7R2.3	2024-11-12	2 versions
CVE-2024-38657US	medium4.9	1.62% (76th)	—	22.7R2.3	2025-02-21	6 versions
CVE-2024-47907US	high7.5	1.56% (75th)	—	22.7R2.3	2024-11-12	3 versions
CVE-2024-37401US	—	1.53% (75th)	—	22.7R2.4	2024-12-12	2 versions
CVE-2024-9420US	high8.8	1.43% (73rd)	—	22.7R2.3	2024-11-12	2 versions
CVE-2024-8495US	high7.5	1.40% (72nd)	—	22.7R2.3	2024-11-12	3 versions
CVE-2025-5462US	—	1.14% (66th)	—	22.8R2	2025-08-12	8 versions
CVE-2024-12058US	medium4.9	1.13% (66th)	—	22.7R2.6	2025-02-11	3 versions
CVE-2025-5456US	—	1.12% (66th)	—	22.7R2.8	2025-08-12	8 versions
CVE-2024-47909US	medium4.9	1.10% (65th)	—	22.7R2.3	2024-11-12	3 versions
CVE-2024-47905US	medium4.9	1.10% (65th)	—	22.7R2.3	2024-11-12	3 versions
CVE-2023-38551US	—	1.00% (63rd)	—	9.1R18.6	2024-05-31	6 versions
CVE-2024-9844US	high8.8	0.99% (62nd)	—	22.7R2.4	2024-12-10	2 versions
CVE-2025-55142US	—OT elevated	0.96% (61st)	—	22.8R2	2025-09-09	5 versions
CVE-2025-55141US	—OT elevated	0.96% (61st)	—	22.7R2.9	2025-09-09	5 versions
CVE-2025-55139US	—	0.91% (60th)	—	22.7R2.9	2025-09-09	5 versions
CVE-2024-11004US	medium6.1	0.91% (60th)	—	22.7R2.3	2024-11-12	3 versions
CVE-2025-55146US	—	0.80% (56th)	—	22.8R2	2025-09-09	5 versions
CVE-2024-13830US	medium6.1	0.74% (55th)	—	22.7R2.6	2025-02-11	3 versions

showing 50 of 77

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write11 CVEs
CWE-121Stack-based Buffer Overflow8 CVEs
CWE-125Out-of-bounds Read8 CVEs
CWE-862Missing Authorization6 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')6 CVEs
CWE-267Privilege Defined With Unsafe Actions5 CVEs
CWE-703Improper Check or Handling of Exceptional Conditions4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs

sources (5)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)63 CVEs
EUEU Vulnerability Database (ENISA)61 CVEs
RUBDU (FSTEC Data Security Threats Database)36 CVEs
NLNCSC-NL (CSAF)16 CVEs
USCISA CSAF IT advisories7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan