ivanti secure access client

Name: ivanti secure access client
Brand: ivanti

productUS

cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical10high3medium1low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-38041US	high7.0	0.74% (54th)	Exploit	22.6	2023-10-25	< 22.6
CVE-2023-35080US	high7.8OT elevated	0.71% (53rd)	Exploit	22.6	2023-11-15	2 versions
CVE-2023-34298US	—	0.97% (62nd)	—	no fix	2024-05-03	2 versions
CVE-2026-8992US	—	0.56% (47th)	—	no fix	2026-05-22	2 versions
CVE-2023-41718US	high7.8OT elevated	0.45% (39th)	—	no fix	2023-11-15	2 versions
CVE-2023-38544US	medium5.5	0.37% (31st)	—	no fix	2023-11-15	2 versions
CVE-2023-38043US	high7.8	0.37% (31st)	—	22.6	2023-11-15	2 versions
CVE-2023-38543US	high7.8	0.37% (31st)	—	22.6	2023-11-15	2 versions
CVE-2023-38042US	—	0.34% (28th)	—	22.7	2024-05-31	< 22.7
CVE-2024-37398US	high7.8	0.32% (25th)	—	22.7	2024-11-13	2 versions
CVE-2023-46810US	—	0.31% (24th)	—	22.7	2024-05-31	< 22.7
CVE-2025-22454US	—	0.30% (23rd)	—	22.7	2025-03-11	2 versions
CVE-2024-29211US	medium4.7	0.30% (22nd)	—	22.7	2024-11-13	2 versions
CVE-2026-7432US	high7.0	0.28% (21st)	—	no fix	2026-05-12	2 versions
CVE-2024-38654US	—	0.28% (21st)	—	22.7	2024-11-13	2 versions
CVE-2024-7571US	high7.8	0.26% (18th)	—	22.7	2024-11-12	2 versions
CVE-2024-9843US	medium5.5	0.26% (17th)	—	22.7	2024-11-12	2 versions
CVE-2024-8539US	high7.1	0.22% (12th)	—	22.7	2024-11-12	2 versions
CVE-2024-13813US	high7.1	0.21% (11th)	—	22.8	2025-02-11	< 22.8
CVE-2024-9842US	low3.3	0.21% (11th)	—	22.7	2024-11-12	2 versions
CVE-2026-7431US	—	0.18% (7th)	—	no fix	2026-05-12	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-267Privilege Defined With Unsafe Actions4 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-276Incorrect Default Permissions2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-126Buffer Over-read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.