Login Request a demo
PS
Product
Policy Secure
by Ivanti · last CVE Sep 9, 2025
On CISA KEVExploited in the wildRansomware-linked
77
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities77In the news0Timeline
Severity mix
Critical 8High 36Medium 31Low 2
Severity
All severities77Critical8High36Medium31Low2
Exploitation
On CISA KEV8Exploited in the wild8
Watch

Add Policy Secure to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-22457
RansomwareIn wildKEV
9.8
100%
Apr 3
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Affected: before 22.7; 22.7; 22.7; 22.7; 22.7; 22.7
CVE-2024-21887
RansomwareIn wildKEV
9.1
100%
Jan 12
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
Affected: 9.0; 9.1; 9.1; 9.1; 9.1; 9.1; +31 more
CVE-2025-0282
RansomwareIn wildKEV
9.0
100%
Jan 8
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Affected: 22.7R1 through 22.7R1.2
CVE-2024-21893
RansomwareIn wildKEV
8.2
100%
Jan 31
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
Affected: 9.0; 9.0; 9.0; 9.0; 9.0; 9.0; +34 more
CVE-2023-46805
RansomwareIn wildKEV
8.2
100%
Jan 12
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
Affected: 9.0; 9.1; 9.1; 9.1; 9.1; 9.1; +31 more
CVE-2020-8243
In wildKEV
7.2
91%
Sep 29
Ivanti Pulse Connect Secure Code Execution Vulnerability
Affected: through 9.0; 9.1; 9.1; 9.1; 9.1; 9.1; +8 more
CVE-2020-8218
In wildKEV
7.2
32%
Jul 30
Pulse Connect Secure Code Injection Vulnerability
Affected: 9.1; 9.1; 9.1; 9.1; 9.1; 9.1; +5 more
CVE-2019-11539
RansomwareIn wildKEV
7.2
99%
Apr 26
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
Affected: 9.0; 9.0; 9.0; 9.0; 9.0
Showing 8