Class familyIvanti · Connect Secure and Policy Secure
Ivanti Connect Secure command injection flaws, 2021–2024
3 Connect Secure and Policy Secure CVEs with CWE-77 weaknesses, 27 May 2021 to 10 Dec 2024. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2021’21
2022’22
2023’23
2 2024’24
In CISA KEVNot in KEV
20211 CVE, 1 in KEV
20242 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2021-22899KEV | 27 May 2021 | Ivanti Pulse Connect Secure Command Injection Vulnerability | Grouped by weakness | 67.6 |
| CVE-2024-21887KEV | 12 Jan 2024 | Ivanti Connect Secure and Policy Secure Command Injection Vulnerability | Grouped by weakness | 88.4 |
| CVE-2024-11634 | 10 Dec 2024 | Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2… | Grouped by weakness | 22.2 |