Ivanti Secure Access Client

Name: Ivanti Secure Access Client
Brand: Ivanti

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical17high6medium1low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-38041US	high7.0	0.74% (54th)	Exploit	22.6R1	2023-10-25	2 versions
CVE-2023-35080US	high7.8OT elevated	0.71% (53rd)	Exploit	22.6.1.1	2023-11-15	3 versions
CVE-2024-47908US	high7.2	22.3% (98th)	—	22.7R4	2025-02-11	< 22.7R4
CVE-2024-37400US	—	2.10% (82nd)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-38649US	high7.5	1.94% (80th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-39710US	—	1.89% (79th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-38655US	high7.2	1.73% (78th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-39712US	—	1.73% (78th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-39711US	—	1.73% (78th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-38656US	—	1.73% (78th)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2024-11006US	high7.2	1.64% (76th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-11005US	high7.2	1.64% (76th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-11007US	high7.2	1.64% (76th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-38657US	medium4.9	1.62% (76th)	—	22.7R4	2025-02-21	< 22.7R4
CVE-2024-47907US	high7.5	1.56% (75th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-9420US	high8.8	1.43% (73rd)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-8495US	high7.5	1.40% (72nd)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-47909US	medium4.9	1.10% (65th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-47905US	medium4.9	1.10% (65th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-11004US	medium6.1	0.91% (60th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2026-8992US	—	0.56% (47th)	—	22.8R6	2026-05-22	< 22.8R6
CVE-2023-38042US	—	0.34% (28th)	—	22.7R1	2024-05-31	2 versions
CVE-2024-37398US	high7.8	0.32% (25th)	—	22.7R4	2024-11-13	3 versions
CVE-2023-46810US	—	0.31% (24th)	—	no fix	2024-05-31	≤ 22.7R1
CVE-2025-22454US	—	0.30% (23rd)	—	22.7R4	2025-03-11	7 versions
CVE-2024-29211US	medium4.7	0.30% (22nd)	—	22.7R4	2024-11-13	3 versions
CVE-2024-39709US	—OT elevated	0.30% (22nd)	—	22.7R4	2024-11-13	< 22.7R4
CVE-2026-7432US	high7.0	0.28% (21st)	—	22.8R6	2026-05-12	2 versions
CVE-2024-38654US	—	0.28% (21st)	—	22.7R4	2024-11-13	3 versions
CVE-2024-7571US	high7.8	0.26% (18th)	—	22.7R4	2024-11-12	2 versions
CVE-2024-9843US	medium5.5	0.26% (17th)	—	22.7R4	2024-11-12	2 versions
CVE-2024-47906US	high7.8	0.22% (13th)	—	22.7R4	2024-11-12	< 22.7R4
CVE-2024-8539US	high7.1	0.22% (12th)	—	22.7R4	2024-11-12	2 versions
CVE-2024-13813US	high7.1	0.21% (11th)	—	22.8R1	2025-02-11	2 versions
CVE-2024-9842US	low3.3	0.21% (11th)	—	22.7R4	2024-11-12	2 versions
CVE-2026-7431US	—	0.18% (7th)	—	22.8R6	2026-05-12	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-267Privilege Defined With Unsafe Actions5 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource5 CVEs
CWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs

sources (4)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)31 CVEs
EUEU Vulnerability Database (ENISA)15 CVEs
RUBDU (FSTEC Data Security Threats Database)8 CVEs
NLNCSC-NL (CSAF)1 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan