Known vulnerabilities in Ivanti Connect Secure (formerly Pulse Connect Secure) 22.7R2 - page 2

Vendor: Ivanti
Software: Ivanti Connect Secure (formerly Pulse Connect Secure)
Version: 22.7R2
Software CPE: cpe:2.3:a:ivanti:pulse_connect_secure:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 54
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ivanti Connect Secure (formerly Pulse Connect Secure) version 22.7R2 Ivanti Connect Secure (formerly Pulse Connect Secure) 22.7R2 is affected by 54 vulnerabilities: 2 critical, 20 medium, 32 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112535 - Improper Access Control
CVE-2025-5450		 CWE-284 Low
No
No
 22.7R2.8 08.07.2025 SB2025070874
#VU106969 - Stack-based buffer overflow
CVE-2025-22457		 CWE-121 Critical
Public exploit available
Exploited
 22.7R2.6 03.04.2025 SB20250403123
SB20250403124
SB20250403125
#VU103945 - Cleartext Storage of Sensitive Information
CVE-2024-13843		 CWE-312 Low
No
No
 22.7R2.6 13.02.2025 SB2025021312
#VU103944 - Use of Hard-coded Cryptographic Key
CVE-2024-13842		 CWE-321 Low
No
No
 22.7R2.3 13.02.2025 SB2025021311
#VU103943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-13830		 CWE-79 Low
No
No
 22.7R2.6 13.02.2025 SB2025021312
#VU103942 - External Control of File Name or Path
CVE-2024-12058		 CWE-73 Low
No
No
 22.7R2.6 13.02.2025 SB2025021312
#VU103941 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-10644		 CWE-94 Low
No
No
 22.7R2.4 13.02.2025 SB2025021310
#VU103940 - Stack-based buffer overflow
CVE-2025-22467		 CWE-121 Medium
No
No
 22.7R2.6 13.02.2025 SB2025021312
#VU103939 - External Control of File Name or Path
CVE-2024-38657		 CWE-73 Low
No
No
 22.7R2.4 13.02.2025 SB2025021310
#VU102474 - Stack-based buffer overflow
CVE-2025-0283		 CWE-121 Low
No
No
 22.7R2.5 08.01.2025 SB2025010871
SB2025010872
SB2025010873
#VU102473 - Stack-based buffer overflow
CVE-2025-0282		 CWE-121 Critical
Public exploit available
Exploited
 22.7R2.5 08.01.2025 SB2025010871
SB2025010872
SB2025010873
#VU101677 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11634		 CWE-78 Low
No
No
 22.7R2.3 11.12.2024 SB2024121176
#VU101676 - Argument Injection or Modification
CVE-2024-11633		 CWE-88 Low
No
No
 22.7R2.4 11.12.2024 SB2024121175
#VU101675 - Out-of-bounds read
CVE-2024-37401		 CWE-125 Medium
No
No
 22.7R2.1 11.12.2024 SB2024121173
#VU101674 - Client-Side Enforcement of Server-Side Security
CVE-2024-9844		 CWE-602 Medium
No
No
 22.7R2.4 11.12.2024 SB2024121175
#VU101673 - Heap-based Buffer Overflow
CVE-2024-37377		 CWE-122 Medium
No
No
 22.7R2.3 11.12.2024 SB2024121174
#VU100482 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11007		 CWE-78 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100475 - Argument Injection or Modification
CVE-2024-38655		 CWE-88 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100474 - Out-of-bounds write
CVE-2024-38649		 CWE-787 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100472 - NULL Pointer Dereference
CVE-2024-8495		 CWE-476 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422


Showing elements 21 - 40 out of 54