Known vulnerabilities in Ivanti Connect Secure (formerly Pulse Connect Secure) 22.7R2 - page 3

Vendor: Ivanti
Software: Ivanti Connect Secure (formerly Pulse Connect Secure)
Version: 22.7R2
Software CPE: cpe:2.3:a:ivanti:pulse_connect_secure:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 54
Public exploits: 2
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Ivanti Connect Secure (formerly Pulse Connect Secure) version 22.7R2 Ivanti Connect Secure (formerly Pulse Connect Secure) 22.7R2 is affected by 54 vulnerabilities: 2 critical, 20 medium, 32 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11004		 CWE-79 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100484 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11005		 CWE-78 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100483 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11006		 CWE-78 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100481 - Argument Injection or Modification
CVE-2024-39712		 CWE-88 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100480 - Argument Injection or Modification
CVE-2024-39711		 CWE-88 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100479 - Argument Injection or Modification
CVE-2024-39710		 CWE-88 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100477 - Incorrect Default Permissions
CVE-2024-39709		 CWE-276 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100476 - Argument Injection or Modification
CVE-2024-38656		 CWE-88 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100471 - Stack-based buffer overflow
CVE-2024-47909		 CWE-121 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100469 - Stack-based buffer overflow
CVE-2024-47907		 CWE-121 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100468 - Untrusted Search Path
CVE-2024-47906		 CWE-426 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100467 - Use After Free
CVE-2024-9420		 CWE-416 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100466 - Out-of-bounds read
CVE-2024-37400		 CWE-125 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100465 - Stack-based buffer overflow
CVE-2024-47905		 CWE-121 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422


Showing elements 41 - 60 out of 54