SA
Product
Secure Access Client
21
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 15Medium 5Low 1
Watch
Add Secure Access Client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9843 | 5.5 | Nov 12 | A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service Affected: before 22.7; 22.7; 22.7; 22.7; 22.7; 22.7 |
| CVE-2023-38544 | 5.5 | Nov 15 | A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings Affected: 22.2; 22.3; 22.3; 22.3 |
| CVE-2024-29211 | 4.7 | Nov 13 | A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files Affected: before 22.7; 22.7; 22.7; 22.7; 22.7 |
| CVE-2026-7431 | 4.4 | May 12 | An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via… Affected: through 22.7; 22.8; 22.8; 22.8; 22.8; 22.8; +1 more |
| CVE-2024-38654 | 4.4 | Nov 13 | Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service Affected: before 22.7; 22.7; 22.7; 22.7; 22.7; 22.7 |
Showing 5