Ivanti Connect Secure <22.8R2

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical0high0medium0low

updated 2026-10-27

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-5462US	—	1.14% (66th)	—	no fix	2025-08-12	—
CVE-2025-5456US	—	1.12% (66th)	—	no fix	2025-08-12	—
CVE-2025-55142US	—OT elevated	0.96% (61st)	—	no fix	2025-09-09	—
CVE-2025-55141US	—OT elevated	0.96% (61st)	—	no fix	2025-09-09	—
CVE-2025-55139US	—	0.91% (60th)	—	no fix	2025-09-09	—
CVE-2025-55146US	—	0.80% (56th)	—	no fix	2025-09-09	—
CVE-2025-55143US	—	0.74% (55th)	—	no fix	2025-09-09	—
CVE-2025-5466US	—	0.68% (52nd)	—	no fix	2025-08-12	—
CVE-2025-55145US	—OT elevated	0.67% (52nd)	—	no fix	2025-09-09	—
CVE-2025-55147US	—	0.63% (50th)	—	no fix	2025-09-09	—
CVE-2025-55148US	—OT elevated	0.59% (48th)	—	no fix	2025-09-09	—
CVE-2025-55144US	—OT elevated	0.59% (48th)	—	no fix	2025-09-09	—
CVE-2025-8712US	—OT elevated	0.45% (39th)	—	no fix	2025-09-09	—
CVE-2025-5468US	—	0.36% (30th)	—	no fix	2025-08-12	—
CVE-2025-8711US	—	0.33% (26th)	—	no fix	2025-09-09	—

The flaw types (CWEs) most of these CVEs share.

CWE-862Missing Authorization6 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-252Unchecked Return Value1 CVEs
CWE-61UNIX Symbolic Link (Symlink) Following1 CVEs
CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.