agentprime: ivanti-connect-secure

agentprime: ivanti-connect-secureEvery new CVE for ivanti-connect-secure.https://agentprime.io/CVE-2026-118527: Ivanti Connect Secure: Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and…https://agentprime.io/advisories/CVE-2026-118527/https://agentprime.io/advisories/CVE-2026-118527/CVSS 4.3 (Medium). Critical: In CISA’s KEV catalogue since 30 Oct 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:53:28 GMTCVEcriticalKEVCVE-2026-111357: Ivanti Connect Secure: Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts…https://agentprime.io/advisories/CVE-2026-111357/https://agentprime.io/advisories/CVE-2026-111357/CVSS 7.0 (High). Critical: In CISA’s KEV catalogue since 30 Oct 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 20:56:58 GMTCVEcriticalKEVCVE-2026-104935: Authentication bypass by spoofing in Ivanti Connect Securehttps://agentprime.io/advisories/CVE-2026-104935/https://agentprime.io/advisories/CVE-2026-104935/CVSS 8.6 (High). Critical: In CISA’s KEV catalogue since 13 Oct 2026: it is known to be exploited. CVSS score 8.6 (7.0 or more) and EPSS 0.89 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:31:07 GMTCVEcriticalKEVCVE-2025-55144: Missing authorization in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55144/https://agentprime.io/advisories/CVE-2025-55144/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:55:30 GMTCVECVE-2025-55143: Cross-site scripting in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55143/https://agentprime.io/advisories/CVE-2025-55143/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:52:50 GMTCVECVE-2025-55142: Missing authorization in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55142/https://agentprime.io/advisories/CVE-2025-55142/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:49:20 GMTCVECVE-2025-55141: Missing authorization in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55141/https://agentprime.io/advisories/CVE-2025-55141/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:45:52 GMTCVECVE-2025-55139: Server-side request forgery in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55139/https://agentprime.io/advisories/CVE-2025-55139/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:41:16 GMTCVECVE-2025-55148: Missing authorization in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55148/https://agentprime.io/advisories/CVE-2025-55148/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:37:45 GMTCVECVE-2025-55147: Cross-site request forgery in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55147/https://agentprime.io/advisories/CVE-2025-55147/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:32:25 GMTCVECVE-2025-55146: Unchecked return value in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55146/https://agentprime.io/advisories/CVE-2025-55146/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:28:10 GMTCVECVE-2025-8711: Cross-site request forgery in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-8711/https://agentprime.io/advisories/CVE-2025-8711/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:17:25 GMTCVECVE-2025-5468: Ivanti Connect Secure: Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or…https://agentprime.io/advisories/CVE-2025-5468/https://agentprime.io/advisories/CVE-2025-5468/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 15:05:23 GMTCVECVE-2025-5466: XML entity expansion in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5466/https://agentprime.io/advisories/CVE-2025-5466/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 15:00:05 GMTCVECVE-2025-5462: Heap-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5462/https://agentprime.io/advisories/CVE-2025-5462/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 14:56:19 GMTCVECVE-2025-5456: Out-of-bounds read in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5456/https://agentprime.io/advisories/CVE-2025-5456/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 14:50:46 GMTCVECVE-2025-0292: Server-side request forgery in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-0292/https://agentprime.io/advisories/CVE-2025-0292/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:33:24 GMTCVECVE-2025-0293: CRLF injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-0293/https://agentprime.io/advisories/CVE-2025-0293/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:33:05 GMTCVECVE-2025-5464: Sensitive information in log files in Ivanti Connect Securehttps://agentprime.io/advisories/CVE-2025-5464/https://agentprime.io/advisories/CVE-2025-5464/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:32:32 GMTCVECVE-2025-5463: Sensitive information in log files in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5463/https://agentprime.io/advisories/CVE-2025-5463/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:02:38 GMTCVECVE-2025-5451: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5451/https://agentprime.io/advisories/CVE-2025-5451/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:02:00 GMTCVECVE-2025-5450: Ivanti Connect Secure: Improper access control in the certificate management component of Ivanti Connect Secure…https://agentprime.io/advisories/CVE-2025-5450/https://agentprime.io/advisories/CVE-2025-5450/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:00:02 GMTCVECVE-2025-22457: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-22457/https://agentprime.io/advisories/CVE-2025-22457/CVSS 9.0 (Critical). Critical: In CISA’s KEV catalogue since 4 Apr 2025: it is known to be exploited. CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 15:20:23 GMTCVEcriticalKEVCVE-2024-38657: External control of a file path in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-38657/https://agentprime.io/advisories/CVE-2024-38657/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Feb 2025 01:25:43 GMTCVEcriticalCVE-2024-13843: Cleartext storage of sensitive information in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-13843/https://agentprime.io/advisories/CVE-2024-13843/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:26:32 GMTCVECVE-2024-13842: Hard-coded cryptographic key in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-13842/https://agentprime.io/advisories/CVE-2024-13842/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:25:49 GMTCVECVE-2024-13830: Cross-site scripting in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-13830/https://agentprime.io/advisories/CVE-2024-13830/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:22:15 GMTCVECVE-2024-12058: External control of a file path in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-12058/https://agentprime.io/advisories/CVE-2024-12058/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:21:18 GMTCVECVE-2024-10644: Code injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-10644/https://agentprime.io/advisories/CVE-2024-10644/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:20:46 GMTCVEcriticalCVE-2025-22467: Stack-based buffer overflow in Ivanti Connect Securehttps://agentprime.io/advisories/CVE-2025-22467/https://agentprime.io/advisories/CVE-2025-22467/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:20:16 GMTCVEcriticalCVE-2025-0283: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-0283/https://agentprime.io/advisories/CVE-2025-0283/CVSS 7.0 (High). Critical: CVSS score 7.0 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jan 2025 22:15:59 GMTCVEcriticalCVE-2025-0282: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-0282/https://agentprime.io/advisories/CVE-2025-0282/CVSS 9.0 (Critical). Critical: In CISA’s KEV catalogue since 8 Jan 2025: it is known to be exploited. CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jan 2025 22:15:09 GMTCVEcriticalKEVCVE-2024-37401: Out-of-bounds read in Ivanti Connect Securehttps://agentprime.io/advisories/CVE-2024-37401/https://agentprime.io/advisories/CVE-2024-37401/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Dec 2024 18:52:27 GMTCVECVE-2024-37377: Out-of-bounds write in Ivanti Connect Securehttps://agentprime.io/advisories/CVE-2024-37377/https://agentprime.io/advisories/CVE-2024-37377/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Dec 2024 18:52:27 GMTCVECVE-2024-11634: Command injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11634/https://agentprime.io/advisories/CVE-2024-11634/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 18:48:29 GMTCVEcriticalCVE-2024-11633: Argument injection in Ivanti Connect Securehttps://agentprime.io/advisories/CVE-2024-11633/https://agentprime.io/advisories/CVE-2024-11633/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 18:47:55 GMTCVEcriticalCVE-2024-9844: Ivanti Connect Secure: Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure…https://agentprime.io/advisories/CVE-2024-9844/https://agentprime.io/advisories/CVE-2024-9844/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 18:46:56 GMTCVECVE-2024-38655: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-38655/https://agentprime.io/advisories/CVE-2024-38655/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-39712: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-39712/https://agentprime.io/advisories/CVE-2024-39712/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-37400: Out-of-bounds read in Ivanti Connect Securehttps://agentprime.io/advisories/CVE-2024-37400/https://agentprime.io/advisories/CVE-2024-37400/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVECVE-2024-38649: Out-of-bounds read in Ivanti Connect Securehttps://agentprime.io/advisories/CVE-2024-38649/https://agentprime.io/advisories/CVE-2024-38649/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVECVE-2024-39711: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-39711/https://agentprime.io/advisories/CVE-2024-39711/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-39709: Incorrect permission assignment in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-39709/https://agentprime.io/advisories/CVE-2024-39709/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVECVE-2024-38656: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-38656/https://agentprime.io/advisories/CVE-2024-38656/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-39710: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-39710/https://agentprime.io/advisories/CVE-2024-39710/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-11004: Cross-site scripting in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11004/https://agentprime.io/advisories/CVE-2024-11004/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:09:19 GMTCVECVE-2024-11005: OS command injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11005/https://agentprime.io/advisories/CVE-2024-11005/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:07:45 GMTCVEcriticalCVE-2024-11006: OS command injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11006/https://agentprime.io/advisories/CVE-2024-11006/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:06:16 GMTCVEcriticalCVE-2024-11007: OS command injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11007/https://agentprime.io/advisories/CVE-2024-11007/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:05:26 GMTCVEcriticalCVE-2024-8495: NULL pointer dereference in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-8495/https://agentprime.io/advisories/CVE-2024-8495/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:04:41 GMTCVE