CS
VPN
Connect Secure
On CISA KEVExploited in the wildRansomware-linked
132
CVEs
15
On KEV
10.0
Max CVSS
2
New 30D
Severity mix
Critical 15High 69Medium 46Low 2
Watch
Add Connect Secure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22899 In wildKEV | 8.8 | May 27 | Ivanti Pulse Connect Secure Command Injection Vulnerability Affected: Fixed in 9.1R11.4 |
| CVE-2021-22894 In wildKEV | 8.8 | May 27 | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability Affected: Fixed version 9.1R11.4 |
| CVE-2026-104935 In wildKEV | 8.6 | Oct 13 | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability Affected: 25.1.0.0 before 25.1.1.2; 25.1.2.0 before 25.1.3.0; 22.8; 22.8; 22.8; 22.8; +1 more |
| CVE-2024-21893 RansomwareIn wildKEV | 8.2 | Jan 31 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Affected: 9.1R18 through 9.1R18; 22.6R2 through 22.6R2 |
| CVE-2023-46805 RansomwareIn wildKEV | 8.2 | Jan 12 | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability Affected: 9.1R18 through 9.1R18; 22.6R2 through 22.6R2 |
| CVE-2021-22900 In wildKEV | 7.2 | May 27 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability Affected: 9.0; 9.0; 9.0; 9.0; 9.0; 9.0; +34 more |
| CVE-2020-8260 In wildKEV | 7.2 | Oct 28 | Ivanti Pulse Connect Secure Code Execution Vulnerability Affected: through 9.0; 9.1; 9.1; 9.1; 9.1; 9.1; +10 more |
| CVE-2020-8243 In wildKEV | 7.2 | Sep 29 | Ivanti Pulse Connect Secure Code Execution Vulnerability Affected: through 9.0; 9.1; 9.1; 9.1; 9.1; 9.1; +8 more |
| CVE-2020-8218 In wildKEV | 7.2 | Jul 30 | Pulse Connect Secure Code Injection Vulnerability Affected: Fixed in 9.1R8 |
| CVE-2019-11539 RansomwareIn wildKEV | 7.2 | Apr 26 | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability Affected: 8.1; 8.1; 8.1; 8.1; 8.1; 8.1; +34 more |
Showing 10