agentprime: ivanti-policy-secure

agentprime: ivanti-policy-secureEvery new CVE for ivanti-policy-secure.https://agentprime.io/CVE-2025-55144: Missing authorization in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55144/https://agentprime.io/advisories/CVE-2025-55144/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:55:30 GMTCVECVE-2025-55143: Cross-site scripting in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55143/https://agentprime.io/advisories/CVE-2025-55143/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:52:50 GMTCVECVE-2025-55142: Missing authorization in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55142/https://agentprime.io/advisories/CVE-2025-55142/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:49:20 GMTCVECVE-2025-55141: Missing authorization in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55141/https://agentprime.io/advisories/CVE-2025-55141/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:45:52 GMTCVECVE-2025-55139: Server-side request forgery in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55139/https://agentprime.io/advisories/CVE-2025-55139/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:41:16 GMTCVECVE-2025-55148: Missing authorization in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55148/https://agentprime.io/advisories/CVE-2025-55148/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:37:45 GMTCVECVE-2025-55147: Cross-site request forgery in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55147/https://agentprime.io/advisories/CVE-2025-55147/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:32:25 GMTCVECVE-2025-55146: Unchecked return value in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-55146/https://agentprime.io/advisories/CVE-2025-55146/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:28:10 GMTCVECVE-2025-55145: Missing authorization in Ivanti Connect Secure 22.7R2.9 and othershttps://agentprime.io/advisories/CVE-2025-55145/https://agentprime.io/advisories/CVE-2025-55145/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:22:05 GMTCVECVE-2025-8711: Cross-site request forgery in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-8711/https://agentprime.io/advisories/CVE-2025-8711/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:17:25 GMTCVECVE-2025-8712: Missing authorization in Ivanti Connect Secure before and othershttps://agentprime.io/advisories/CVE-2025-8712/https://agentprime.io/advisories/CVE-2025-8712/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 15:12:38 GMTCVECVE-2025-5468: Ivanti Connect Secure: Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or…https://agentprime.io/advisories/CVE-2025-5468/https://agentprime.io/advisories/CVE-2025-5468/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 15:05:23 GMTCVECVE-2025-5466: XML entity expansion in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5466/https://agentprime.io/advisories/CVE-2025-5466/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 15:00:05 GMTCVECVE-2025-5462: Heap-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5462/https://agentprime.io/advisories/CVE-2025-5462/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 14:56:19 GMTCVECVE-2025-5456: Out-of-bounds read in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5456/https://agentprime.io/advisories/CVE-2025-5456/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Aug 2025 14:50:46 GMTCVECVE-2023-39339: Path traversal in Ivanti Policy Securehttps://agentprime.io/advisories/CVE-2023-39339/https://agentprime.io/advisories/CVE-2023-39339/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Jul 2025 03:31:11 GMTCVECVE-2025-0292: Server-side request forgery in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-0292/https://agentprime.io/advisories/CVE-2025-0292/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:33:24 GMTCVECVE-2025-0293: CRLF injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-0293/https://agentprime.io/advisories/CVE-2025-0293/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:33:05 GMTCVECVE-2025-5463: Sensitive information in log files in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5463/https://agentprime.io/advisories/CVE-2025-5463/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:02:38 GMTCVECVE-2025-5451: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-5451/https://agentprime.io/advisories/CVE-2025-5451/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:02:00 GMTCVECVE-2025-5450: Ivanti Connect Secure: Improper access control in the certificate management component of Ivanti Connect Secure…https://agentprime.io/advisories/CVE-2025-5450/https://agentprime.io/advisories/CVE-2025-5450/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Jul 2025 15:00:02 GMTCVECVE-2025-22457: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-22457/https://agentprime.io/advisories/CVE-2025-22457/CVSS 9.0 (Critical). Critical: In CISA’s KEV catalogue since 4 Apr 2025: it is known to be exploited. CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 15:20:23 GMTCVEcriticalKEVCVE-2024-38657: External control of a file path in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-38657/https://agentprime.io/advisories/CVE-2024-38657/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Feb 2025 01:25:43 GMTCVEcriticalCVE-2024-13843: Cleartext storage of sensitive information in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-13843/https://agentprime.io/advisories/CVE-2024-13843/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:26:32 GMTCVECVE-2024-13842: Hard-coded cryptographic key in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-13842/https://agentprime.io/advisories/CVE-2024-13842/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:25:49 GMTCVECVE-2024-13830: Cross-site scripting in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-13830/https://agentprime.io/advisories/CVE-2024-13830/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:22:15 GMTCVECVE-2024-12058: External control of a file path in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-12058/https://agentprime.io/advisories/CVE-2024-12058/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:21:18 GMTCVECVE-2024-10644: Code injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-10644/https://agentprime.io/advisories/CVE-2024-10644/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 15:20:46 GMTCVEcriticalCVE-2025-0283: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-0283/https://agentprime.io/advisories/CVE-2025-0283/CVSS 7.0 (High). Critical: CVSS score 7.0 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jan 2025 22:15:59 GMTCVEcriticalCVE-2025-0282: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2025-0282/https://agentprime.io/advisories/CVE-2025-0282/CVSS 9.0 (Critical). Critical: In CISA’s KEV catalogue since 8 Jan 2025: it is known to be exploited. CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jan 2025 22:15:09 GMTCVEcriticalKEVCVE-2024-11634: Command injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11634/https://agentprime.io/advisories/CVE-2024-11634/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Dec 2024 18:48:29 GMTCVEcriticalCVE-2024-38655: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-38655/https://agentprime.io/advisories/CVE-2024-38655/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-39712: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-39712/https://agentprime.io/advisories/CVE-2024-39712/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-39711: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-39711/https://agentprime.io/advisories/CVE-2024-39711/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-39709: Incorrect permission assignment in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-39709/https://agentprime.io/advisories/CVE-2024-39709/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVECVE-2024-38656: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-38656/https://agentprime.io/advisories/CVE-2024-38656/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-39710: Argument injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-39710/https://agentprime.io/advisories/CVE-2024-39710/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Nov 2024 01:54:45 GMTCVEcriticalCVE-2024-11004: Cross-site scripting in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11004/https://agentprime.io/advisories/CVE-2024-11004/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:09:19 GMTCVECVE-2024-11005: OS command injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11005/https://agentprime.io/advisories/CVE-2024-11005/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:07:45 GMTCVEcriticalCVE-2024-11006: OS command injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11006/https://agentprime.io/advisories/CVE-2024-11006/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:06:16 GMTCVEcriticalCVE-2024-11007: OS command injection in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-11007/https://agentprime.io/advisories/CVE-2024-11007/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:05:26 GMTCVEcriticalCVE-2024-8495: NULL pointer dereference in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-8495/https://agentprime.io/advisories/CVE-2024-8495/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:04:41 GMTCVECVE-2024-47909: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-47909/https://agentprime.io/advisories/CVE-2024-47909/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 16:02:28 GMTCVECVE-2024-47906: Untrusted search path in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-47906/https://agentprime.io/advisories/CVE-2024-47906/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:59:53 GMTCVECVE-2024-9420: Use after free in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-9420/https://agentprime.io/advisories/CVE-2024-9420/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:57:24 GMTCVECVE-2024-47905: Stack-based buffer overflow in Ivanti Connect Secure and othershttps://agentprime.io/advisories/CVE-2024-47905/https://agentprime.io/advisories/CVE-2024-47905/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 15:56:13 GMTCVECVE-2024-37404: Ivanti Connect Secure: Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1…https://agentprime.io/advisories/CVE-2024-37404/https://agentprime.io/advisories/CVE-2024-37404/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. CVSS score 9.1 (7.0 or more) and EPSS 0.71 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Oct 2024 23:06:49 GMTCVEcriticalCVE-2024-29205: Ivanti Connect Secure: An Improper Check for Unusual or Exceptional Conditions vulnerability in the web…https://agentprime.io/advisories/CVE-2024-29205/https://agentprime.io/advisories/CVE-2024-29205/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Apr 2024 23:12:51 GMTCVECVE-2024-21894: Ivanti Connect Secure: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x…https://agentprime.io/advisories/CVE-2024-21894/https://agentprime.io/advisories/CVE-2024-21894/CVSS 8.2 (High). Critical: CVSS score 8.2 (7.0 or more) and EPSS 0.19 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 22:16:29 GMTCVEcriticalCVE-2024-22053: Ivanti Connect Secure: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and…https://agentprime.io/advisories/CVE-2024-22053/https://agentprime.io/advisories/CVE-2024-22053/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 19:45:10 GMTCVE