Vulnerability Monitor

The vendors, products, and vulnerabilities you care about
connect_secure Vendor: ivanti

About This Product

connect_secure is a software product offered by ivanti. This product is widely deployed in production environments, making vulnerability monitoring essential for organizations relying on it. Security vulnerabilities in products of this category can affect system availability, data confidentiality, and integrity across entire networks. The significant number of reported vulnerabilities indicates this product has received substantial security scrutiny and community focus over time. Regular assessment of known vulnerabilities and timely patching are fundamental components of responsible system administration for any deployment of this software.

Vulnerability Landscape Summary

SecUtils has identified 130 known vulnerabilities affecting ivanti connect_secure. This includes 22 critical-severity issues and 59 high-severity issues that warrant immediate attention. Vulnerabilities in this product have been disclosed spanning from 2016 to 2025, indicating a sustained research interest and ongoing security attention. 49 medium-severity issues complete the vulnerability landscape. Organizations should prioritize patching based on deployment context, asset criticality, and exploitation likelihood rather than severity alone.

Known Vulnerabilities
ID Date Published Last Modified Severity (CVSSv3) Severity (CVSSv2) Exploit Available
CVE-2016-4786 2016-05-26 2025-04-12 7.5 7.8 Likely
CVE-2016-4787 2016-05-26 2025-04-12 10.0 6.4 Likely
CVE-2016-4788 2016-05-26 2025-04-12 5.8 5.0 Likely
CVE-2016-4789 2016-05-26 2025-04-12 6.1 4.3 Likely
CVE-2016-4790 2016-05-26 2025-04-12 5.5 3.5 Unknown
CVE-2016-4791 2016-05-26 2025-04-12 8.6 6.4 Likely
CVE-2016-4792 2016-05-26 2025-04-12 5.3 5.0 Likely
CVE-2017-11455 2017-08-29 2025-04-20 8.8 6.8 Likely
CVE-2018-14366 2018-09-06 2024-11-21 6.1 5.8 Likely
CVE-2018-6320 2018-09-06 2024-11-21 9.8 7.5 Likely
CVE-2019-11213 2019-04-12 2024-11-21 8.1 6.8 Likely
CVE-2019-11538 2019-04-26 2024-11-21 7.7 4.0 Likely
CVE-2019-11539 2019-04-26 2025-11-06 7.2 6.5 Likely
CVE-2019-11540 2019-04-26 2024-11-21 9.8 7.5 Likely
CVE-2019-11541 2019-04-26 2024-11-21 7.5 5.0 Likely
CVE-2019-11542 2019-04-26 2024-11-21 7.2 6.5 Likely
CVE-2019-11543 2019-04-26 2024-11-21 6.1 4.3 Likely
CVE-2019-11507 2019-05-08 2024-11-21 6.1 4.3 Likely
CVE-2019-11508 2019-05-08 2024-11-21 7.2 6.5 Likely
CVE-2019-11510 2019-05-08 2025-12-18 10.0 7.5 Likely
CVE-2019-11509 2019-06-03 2024-11-21 8.8 6.5 Likely
CVE-2019-11477 2019-06-19 2024-11-21 7.5 7.8 Likely
CVE-2019-11478 2019-06-19 2024-11-21 5.3 5.0 Likely
CVE-2018-20807 2019-06-28 2024-11-21 6.1 4.3 Likely
CVE-2018-20808 2019-06-28 2024-11-21 6.1 4.3 Likely
CVE-2018-20809 2019-06-28 2024-11-21 7.5 5.0 Likely
CVE-2018-20810 2019-06-28 2024-11-21 9.8 7.5 Likely
CVE-2018-20811 2019-06-28 2024-11-21 5.3 5.0 Likely
CVE-2018-20813 2019-06-28 2024-11-21 9.8 7.5 Likely
CVE-2018-20814 2019-06-28 2024-11-21 6.1 4.3 Likely
CVE-2020-12880 2020-07-27 2024-11-21 5.5 2.1 Unknown
CVE-2020-8204 2020-07-30 2024-11-21 6.1 4.3 Likely
CVE-2020-8206 2020-07-30 2024-11-21 8.1 6.8 Likely
CVE-2020-8216 2020-07-30 2024-11-21 4.3 4.0 Likely
CVE-2020-8217 2020-07-30 2024-11-21 5.4 3.5 Unknown
CVE-2020-8218 2020-07-30 2025-10-30 7.2 6.5 Likely
CVE-2020-8219 2020-07-30 2024-11-21 7.2 4.0 Likely
CVE-2020-8220 2020-07-30 2024-11-21 6.5 5.5 Likely
CVE-2020-8221 2020-07-30 2024-11-21 4.9 4.0 Likely
CVE-2020-8222 2020-07-30 2024-11-21 6.8 4.0 Likely
CVE-2020-8238 2020-09-30 2024-11-21 6.1 4.3 Likely
CVE-2020-8243 2020-09-30 2025-12-18 7.2 6.5 Likely
CVE-2020-8256 2020-09-30 2024-11-21 4.9 4.0 Likely
CVE-2020-15352 2020-10-27 2024-11-21 7.2 6.5 Likely
CVE-2020-8260 2020-10-28 2025-12-18 7.2 6.5 Likely
CVE-2020-8261 2020-10-28 2024-11-21 4.3 4.3 Likely
CVE-2020-8262 2020-10-28 2024-11-21 6.1 4.3 Likely
CVE-2021-22893 2021-04-23 2025-12-18 10.0 7.5 Likely
CVE-2021-22894 2021-05-27 2025-12-18 8.8 9.0 Likely
CVE-2021-22899 2021-05-27 2025-12-18 8.8 6.5 Likely
CVE-2021-22900 2021-05-27 2025-12-18 7.2 6.5 Likely
CVE-2021-22908 2021-05-27 2024-11-21 8.8 9.0 Likely
CVE-2021-22933 2021-08-16 2024-11-21 6.5 5.5 Likely
CVE-2021-22934 2021-08-16 2024-11-21 7.2 6.5 Likely
CVE-2021-22935 2021-08-16 2024-11-21 7.2 6.5 Likely
CVE-2021-22936 2021-08-16 2024-11-21 6.1 4.3 Likely
CVE-2021-22937 2021-08-16 2024-11-21 7.2 6.5 Likely
CVE-2021-22938 2021-08-16 2024-11-21 7.2 6.5 Likely
CVE-2021-22965 2021-11-19 2024-11-21 7.5 7.8 Likely
CVE-2021-44720 2022-08-12 2024-11-21 7.2 - -
CVE-2022-21826 2022-09-30 2024-11-21 5.4 - -
CVE-2022-35254 2022-12-05 2025-04-24 7.5 - -
CVE-2022-35258 2022-12-05 2024-11-21 7.5 - -
CVE-2023-41719 2023-12-14 2024-11-21 7.2 - -
CVE-2023-41720 2023-12-14 2024-11-21 7.8 - -
CVE-2023-39340 2023-12-16 2024-11-21 7.5 - -
CVE-2023-46805 2024-01-12 2025-10-31 8.2 - -
CVE-2024-21887 2024-01-12 2025-10-31 9.1 - -
CVE-2024-21888 2024-01-31 2025-06-03 8.8 - -
CVE-2024-21893 2024-01-31 2025-10-30 8.2 - -
CVE-2024-22024 2024-02-13 2025-10-31 8.3 - -
CVE-2024-22023 2024-04-04 2024-11-21 5.3 - -
CVE-2024-22052 2024-04-04 2024-11-21 7.5 - -
CVE-2024-22053 2024-04-04 2024-11-21 8.2 - -
CVE-2024-21894 2024-04-04 2024-11-21 9.8 - -
CVE-2024-37404 2024-10-18 2025-09-23 8.8 - -
CVE-2024-11007 2024-11-12 2024-11-22 9.1 - -
CVE-2024-47905 2024-11-12 2024-11-18 4.9 - -
CVE-2024-47906 2024-11-12 2025-01-17 7.8 - -
CVE-2024-47907 2024-11-12 2024-11-18 7.5 - -
CVE-2024-47909 2024-11-12 2024-11-18 4.9 - -
CVE-2024-8495 2024-11-12 2025-01-17 7.5 - -
CVE-2024-9420 2024-11-12 2025-03-13 8.8 - -
CVE-2024-11004 2024-11-12 2025-01-17 6.1 - -
CVE-2024-11005 2024-11-12 2025-01-17 9.1 - -
CVE-2024-11006 2024-11-12 2025-01-17 9.1 - -
CVE-2024-37400 2024-11-13 2025-06-27 7.5 - -
CVE-2024-38649 2024-11-13 2025-07-16 7.5 - -
CVE-2024-38655 2024-11-13 2025-06-27 7.2 - -
CVE-2024-38656 2024-11-13 2025-06-27 9.1 - -
CVE-2024-39709 2024-11-13 2025-07-16 7.8 - -
CVE-2024-39710 2024-11-13 2025-07-11 9.1 - -
CVE-2024-39711 2024-11-13 2025-07-11 9.1 - -
CVE-2024-39712 2024-11-13 2025-07-11 9.1 - -
CVE-2024-11633 2024-12-10 2025-01-17 9.1 - -
CVE-2024-11634 2024-12-10 2025-01-17 9.1 - -
CVE-2024-9844 2024-12-10 2025-01-17 7.1 - -
CVE-2024-37377 2024-12-12 2025-07-02 7.5 - -
CVE-2024-37401 2024-12-12 2025-07-02 7.5 - -
CVE-2025-0282 2025-01-08 2025-10-24 9.0 - -
CVE-2025-0283 2025-01-08 2025-01-14 7.0 - -
CVE-2024-10644 2025-02-11 2025-07-14 9.1 - -
CVE-2024-12058 2025-02-11 2025-07-16 6.8 - -
CVE-2024-13830 2025-02-11 2025-02-13 6.1 - -
CVE-2024-13842 2025-02-11 2025-02-20 6.0 - -
CVE-2024-13843 2025-02-11 2025-02-20 6.0 - -
CVE-2025-22467 2025-02-11 2025-02-20 9.9 - -
CVE-2024-38657 2025-02-21 2025-07-09 4.9 - -
CVE-2025-22457 2025-04-03 2025-10-24 9.0 - -
CVE-2025-5450 2025-07-08 2025-07-15 6.3 - -
CVE-2025-5451 2025-07-08 2025-07-15 4.9 - -
CVE-2025-5463 2025-07-08 2025-07-15 5.5 - -
CVE-2025-0292 2025-07-08 2025-07-15 5.5 - -
CVE-2025-0293 2025-07-08 2025-07-10 6.6 - -
CVE-2025-5464 2025-07-08 2025-07-15 6.5 - -
CVE-2025-5456 2025-08-12 2025-09-23 7.5 - -
CVE-2025-5462 2025-08-12 2025-09-23 7.5 - -
CVE-2025-5466 2025-08-12 2025-09-23 4.9 - -
CVE-2025-5468 2025-08-12 2025-09-23 5.5 - -
CVE-2025-55139 2025-09-09 2025-09-24 6.8 - -
CVE-2025-55141 2025-09-09 2025-09-24 8.8 - -
CVE-2025-55142 2025-09-09 2025-09-24 8.8 - -
CVE-2025-55143 2025-09-09 2025-09-24 6.1 - -
CVE-2025-55144 2025-09-09 2025-09-24 5.4 - -
CVE-2025-55145 2025-09-09 2025-09-24 8.9 - -
CVE-2025-55146 2025-09-09 2025-09-24 4.9 - -
CVE-2025-55147 2025-09-09 2025-09-24 8.8 - -
CVE-2025-55148 2025-09-09 2025-09-24 7.6 - -
CVE-2025-8711 2025-09-09 2025-09-24 5.4 - -
CVE-2025-8712 2025-09-09 2025-09-24 5.4 - -

How SecUtils Interprets Product Data

SecUtils normalizes and enriches National Vulnerability Database (NVD) records for ivanti connect_secure by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and structuring the data for rapid analysis and asset correlation. For every vulnerability listed, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference information to enable organizations to prioritize patching and risk assessment efficiently. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for vulnerability management and security operations.