CVE security advisories and vulnerability history for Connect Secure by Ivanti.
134
Total CVEs
Published
15
In CISA KEV
Exploited in the wild
27
Public exploits
PoC or exploit code
7.4
Avg CVSS
2016–2026
Last updated
Overview
Ivanti Connect Secure has 134 published CVE records since 2016, of which 15 are in CISA's Known Exploited Vulnerabilities catalog and 27 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.
Severity and exploitation
How the CVSS severity of Ivanti Connect Secure's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical22
High64
Medium48
Low0
In CISA’s Known Exploited Vulnerabilities catalog
15
15 of Ivanti Connect Secure's CVEs are confirmed exploited in the wild.
Public exploits
27
27 of Ivanti Connect Secure's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every Ivanti Connect Secure version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about Ivanti Connect Secure vulnerabilities.
How many CVEs does Ivanti Connect Secure have?
Ivanti Connect Secure has 134 published CVE records since 2016.
How many Ivanti Connect Secure CVEs are in CISA KEV?
Yes — 15 of Ivanti Connect Secure's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Ivanti Connect Secure vulnerabilities?
Yes — 27 of Ivanti Connect Secure's CVEs have a known public exploit.
Which versions of Ivanti Connect Secure are affected?
156 distinct Ivanti Connect Secure versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Ivanti Connect Secure CVEs?
Ivanti Connect Secure's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-121 (Stack-based Buffer Overflow), CWE-88 (Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')), CWE-862 (Missing Authorization).
How many critical Ivanti Connect Secure vulnerabilities are there?
Ivanti Connect Secure has 22 critical and 64 high-severity CVEs.
What is the average severity of Ivanti Connect Secure CVEs?
The average CVSS base score across Ivanti Connect Secure's scored CVEs is 7.4.
