Ivanti Policy Secure

Name: Ivanti Policy Secure
Brand: Ivanti

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical24high13medium3low

updated 2026-10-27

vulnerabilities (70)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21887US	critical9.1OT critical	100.0% (100th)	KEV	no fix	2024-01-12	34 versions
CVE-2024-21893US	high8.2OT critical	100.0% (100th)	KEV	no fix	2024-01-31	2 versions
CVE-2023-46805US	high8.2OT critical	100.0% (100th)	KEV	no fix	2024-01-12	34 versions
CVE-2025-22457US	critical9.8OT critical	100.0% (100th)	KEV	22.7R1.4	2025-04-03	3 versions
CVE-2025-0282US	critical9.0OT critical	100.0% (100th)	KEV	no fix	2025-01-08	3 versions
CVE-2024-22024US	high8.3	94.7% (100th)	Exploit	no fix	2024-02-13	≤ 22.5R1.1
CVE-2024-37404US	high8.8	71.0% (99th)	Exploit	22.7R1.1	2024-10-18	3 versions
CVE-2024-21888US	high8.8	85.4% (100th)	—	no fix	2024-01-31	2 versions
CVE-2024-47908US	high7.2	22.3% (98th)	—	22.7R1.2	2025-02-11	< 22.7R1.2
CVE-2024-21894US	critical9.8	19.0% (97th)	—	22.6R1.2	2024-04-04	12 versions
CVE-2025-0283US	high7.0	17.5% (97th)	—	no fix	2025-01-08	3 versions
CVE-2024-22052US	high7.5	3.75% (90th)	—	22.6R1.2	2024-04-04	14 versions
CVE-2024-22053US	high8.2	3.53% (89th)	—	22.6R1.2	2024-04-04	14 versions
CVE-2024-22023US	medium5.3	3.00% (87th)	—	22.5R1.3	2024-04-04	14 versions
CVE-2024-10644US	high7.2	2.82% (86th)	—	22.7R1.3	2025-02-11	2 versions
CVE-2024-37400US	—	2.10% (82nd)	—	22.7R1.2	2024-11-13	< 22.7R1.2
CVE-2024-38649US	high7.5	1.94% (80th)	—	22.7R1.2	2024-11-13	< 22.7R1.2
CVE-2024-39710US	—	1.89% (79th)	—	22.7R1.2	2024-11-13	5 versions
CVE-2024-11634US	high7.2	1.84% (79th)	—	22.7R1.2	2024-12-10	2 versions
CVE-2024-38655US	high7.2	1.73% (78th)	—	22.7R1.2	2024-11-13	6 versions
CVE-2024-39712US	—	1.73% (78th)	—	22.7R1.2	2024-11-13	5 versions
CVE-2024-39711US	—	1.73% (78th)	—	22.7R1.2	2024-11-13	5 versions
CVE-2024-38656US	—	1.73% (78th)	—	22.7R1.2	2024-11-13	5 versions
CVE-2024-11633US	high7.2	1.69% (77th)	—	22.7R1.2	2024-12-10	< 22.7R1.2
CVE-2024-11006US	high7.2	1.64% (76th)	—	22.7R1.2	2024-11-12	3 versions
CVE-2024-11005US	high7.2	1.64% (76th)	—	22.7R1.2	2024-11-12	3 versions
CVE-2024-11007US	high7.2	1.64% (76th)	—	22.7R1.2	2024-11-12	2 versions
CVE-2024-38657US	medium4.9	1.62% (76th)	—	22.7R1.3	2025-02-21	6 versions
CVE-2024-47907US	high7.5	1.56% (75th)	—	22.7R1.2	2024-11-12	< 22.7R1.2
CVE-2024-9420US	high8.8	1.43% (73rd)	—	22.7R1.2	2024-11-12	2 versions
CVE-2024-8495US	high7.5	1.40% (72nd)	—	22.7R1.2	2024-11-12	3 versions
CVE-2025-5462US	—	1.14% (66th)	—	22.7R1.5	2025-08-12	4 versions
CVE-2024-12058US	medium4.9	1.13% (66th)	—	22.7R1.3	2025-02-11	3 versions
CVE-2025-5456US	—	1.12% (66th)	—	22.7R1.5	2025-08-12	4 versions
CVE-2024-47909US	medium4.9	1.10% (65th)	—	22.7R1.2	2024-11-12	3 versions
CVE-2024-47905US	medium4.9	1.10% (65th)	—	22.7R1.2	2024-11-12	3 versions
CVE-2023-38551US	—	1.00% (63rd)	—	no fix	2024-05-31	≤ 22.7R1
CVE-2023-39339US	—	0.98% (62nd)	—	22.6R1	2025-07-12	22.6R1 → 22.6R1
CVE-2025-55142US	—OT elevated	0.96% (61st)	—	22.7R1.5	2025-09-09	3 versions
CVE-2025-55141US	—OT elevated	0.96% (61st)	—	22.7R1.5	2025-09-09	3 versions
CVE-2025-55139US	—	0.91% (60th)	—	22.7R1.5	2025-09-09	3 versions
CVE-2024-11004US	medium6.1	0.91% (60th)	—	22.7R1.2	2024-11-12	3 versions
CVE-2025-55146US	—	0.80% (56th)	—	22.7R1.5	2025-09-09	3 versions
CVE-2024-13830US	medium6.1	0.74% (55th)	—	22.7R1.3	2025-02-11	3 versions
CVE-2025-55143US	—	0.74% (55th)	—	22.7R1.5	2025-09-09	3 versions
CVE-2025-5451US	—	0.70% (53rd)	—	22.7R1.5	2025-07-08	2 versions
CVE-2025-5466US	—	0.68% (52nd)	—	22.7R1.5	2025-08-12	4 versions
CVE-2025-55145US	—OT elevated	0.67% (52nd)	—	22.7R1.5	2025-09-09	3 versions
CVE-2025-55147US	—	0.63% (50th)	—	22.7R1.5	2025-09-09	3 versions
CVE-2025-55148US	—OT elevated	0.59% (48th)	—	22.7R1.5	2025-09-09	3 versions

showing 50 of 70

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write10 CVEs
CWE-121Stack-based Buffer Overflow7 CVEs
CWE-125Out-of-bounds Read6 CVEs
CWE-862Missing Authorization6 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')6 CVEs
CWE-267Privilege Defined With Unsafe Actions5 CVEs
CWE-703Improper Check or Handling of Exceptional Conditions4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs

sources (5)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)59 CVEs
EUEU Vulnerability Database (ENISA)51 CVEs
RUBDU (FSTEC Data Security Threats Database)31 CVEs
NLNCSC-NL (CSAF)15 CVEs
USCISA CSAF IT advisories7 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan