Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Ivanti Connect Secure, Policy Secure 22.7R1.1, 22.7R2.1, 9.1R18.7 Clear all filters
TI-2024-26634 CVE-2024-39712 · GHSA-2q9p-fqxr-c55c

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and…

Priority MEDIUM 45

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execut…

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01732 Published 2024-11-13 Fixed in 22.7R2.1, 9.1R18.7 +1 CWE-88
TI-2024-26633 CVE-2024-39711 · GHSA-w46m-w25c-wx2r

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and…

Priority MEDIUM 45

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execut…

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01732 Published 2024-11-13 Fixed in 22.7R2.1, 9.1R18.7 +1 CWE-88
TI-2024-26632 CVE-2024-39710 · GHSA-wfrh-gq5h-5225

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and…

Priority MEDIUM 45

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execut…

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.01886 Published 2024-11-13 Fixed in 22.7R2.1, 9.1R18.7 +1 CWE-88