Known vulnerabilities in Ivanti Connect Secure (formerly Pulse Connect Secure) - page 2

Vendor: Ivanti
Software: Ivanti Connect Secure (formerly Pulse Connect Secure)
Software CPE: cpe:2.3:a:ivanti:pulse_connect_secure:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 140
Public exploits: 13
Known exploited (KEV): 15
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Ivanti Connect Secure (formerly Pulse Connect Secure) Ivanti Connect Secure (formerly Pulse Connect Secure) is affected by 140 known vulnerabilities: 6 critical, 15 high, 56 medium, 63 low Critical High Medium Low

Vulnerabilities (140)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112541 - Server-Side Request Forgery (SSRF)
CVE-2025-0292		 CWE-918 Medium
No
No
 22.7R2.8 08.07.2025 SB2025070874
#VU106969 - Stack-based buffer overflow
CVE-2025-22457		 CWE-121 Critical
Available
Exploited
 22.7R2.6 03.04.2025 SB20250403123
SB20250403124
SB20250403125
#VU103945 - Cleartext Storage of Sensitive Information
CVE-2024-13843		 CWE-312 Low
No
No
 22.7R2.6 13.02.2025 SB2025021312
#VU103944 - Use of Hard-coded Cryptographic Key
CVE-2024-13842		 CWE-321 Low
No
No
 22.7R2.3 13.02.2025 SB2025021311
#VU103943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-13830		 CWE-79 Low
No
No
 22.7R2.6 13.02.2025 SB2025021312
#VU103942 - External Control of File Name or Path
CVE-2024-12058		 CWE-73 Low
No
No
 22.7R2.6 13.02.2025 SB2025021312
#VU103941 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-10644		 CWE-94 Low
No
No
 22.7R2.4 13.02.2025 SB2025021310
#VU103940 - Stack-based buffer overflow
CVE-2025-22467		 CWE-121 Medium
No
No
 22.7R2.6 13.02.2025 SB2025021312
#VU103939 - External Control of File Name or Path
CVE-2024-38657		 CWE-73 Low
No
No
 22.7R2.4 13.02.2025 SB2025021310
#VU102474 - Stack-based buffer overflow
CVE-2025-0283		 CWE-121 Low
No
No
 22.7R2.5 08.01.2025 SB2025010871
SB2025010872
SB2025010873
#VU102473 - Stack-based buffer overflow
CVE-2025-0282		 CWE-121 Critical
Available
Exploited
 22.7R2.5 08.01.2025 SB2025010871
SB2025010872
SB2025010873
#VU101677 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11634		 CWE-78 Low
No
No
 22.7R2.3 11.12.2024 SB2024121176
#VU101676 - Argument Injection or Modification
CVE-2024-11633		 CWE-88 Low
No
No
 22.7R2.4 11.12.2024 SB2024121175
#VU101675 - Out-of-bounds read
CVE-2024-37401		 CWE-125 Medium
No
No
 22.7R2.1 11.12.2024 SB2024121173
#VU101674 - Client-Side Enforcement of Server-Side Security
CVE-2024-9844		 CWE-602 Medium
No
No
 22.7R2.4 11.12.2024 SB2024121175
#VU101673 - Heap-based Buffer Overflow
CVE-2024-37377		 CWE-122 Medium
No
No
 22.7R2.3 11.12.2024 SB2024121174
#VU100468 - Untrusted Search Path
CVE-2024-47906		 CWE-426 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100467 - Use After Free
CVE-2024-9420		 CWE-416 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100466 - Out-of-bounds read
CVE-2024-37400		 CWE-125 Medium
No
No
 22.7R2.3 14.11.2024 SB2024111422
#VU100465 - Stack-based buffer overflow
CVE-2024-47905		 CWE-121 Low
No
No
 22.7R2.3 14.11.2024 SB2024111422


Showing elements 21 - 40 out of 140