How many Ivanti Secure Access Client CVEs are in CISA KEV?

None of Ivanti Secure Access Client's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Ivanti Secure Access Client are affected?

35 distinct Ivanti Secure Access Client versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Ivanti Secure Access Client CVEs?

Ivanti Secure Access Client's CVEs most often map to these CWE weakness types: CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-276 (Incorrect Default Permissions), CWE-267 (Privilege Defined With Unsafe Actions), CWE-250 (Execution with Unnecessary Privileges).

What is the average severity of Ivanti Secure Access Client CVEs?

The average CVSS base score across Ivanti Secure Access Client's scored CVEs is 7.0.

RadicalNotion.AI

Log in Start free

Ivanti

21 CVEs

Ivanti Secure Access Client Vulnerabilities

Name: Ivanti Secure Access Client vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Secure Access Client by Ivanti.

21

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.0

Avg CVSS

2023–2026

Last updated May 22, 2026

Overview

Ivanti Secure Access Client has 21 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Ivanti Secure Access Client, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include linux, macos, windows.

Severity and exploitation

How the CVSS severity of Ivanti Secure Access Client's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High16

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Ivanti Secure Access Client's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Ivanti Secure Access Client CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Ivanti Secure Access Client version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 22.710 CVEs
22.7 <= v <= 22.78 CVEs
< 22.64 CVEs
>= 22.7R44 CVEs
<= 22.73 CVEs
>= 22.8R63 CVEs
22.2 <= v <= 22.23 CVEs
22.3 <= v <= 22.33 CVEs
22.6 <= v <= 22.63 CVEs
22.8 <= v <= 22.83 CVEs
>= 22.7r42 CVEs
>= 22.8R12 CVEs
22.7R4 <= v < 22.7R42 CVEs
< 22.7_r41 CVE
< 22.7r11 CVE
< 22.81 CVE
>= 22.7R31 CVE
22.6.1.1 <= v < 22.6.1.11 CVE
22.6R1 <= v < 22.6R11 CVE
22.7 <= v < 22.7r11 CVE
22.7R1 <= v < 22.7R11 CVE
22.7R3 <= v < 22.7R31 CVE

Fixed in

22.710 CVEs
22.7R46 CVEs
22.64 CVEs
22.8R63 CVEs
22.7r12 CVEs
22.7R32 CVEs
22.8R12 CVEs
22.6.1.11 CVE
22.6R11 CVE
22.7_r41 CVE
22.7R11 CVE
22.81 CVE

Default status

All versions9 CVEs

Find a version

21 CVEs

Sort

High vulnerability · 2026-05-22
CVE-2026-8992
Patch
CWE-295
High · CVSS 8.8
EPSS 0.6% (45th pct)2026-05-22
High vulnerability · 2026-05-12
CVE-2026-7432
Patch
CWE-362
High · CVSS 7.8
EPSS 0.3% (21th pct)2026-05-12
Medium vulnerability · 2026-05-12
CVE-2026-7431
Patch
CWE-732
Medium · CVSS 4.4
EPSS 0.2% (7th pct)2026-05-12
High vulnerability · 2025-03-11
CVE-2025-22454
Patch
CWE-732
High · CVSS 7.8
EPSS 0.3% (22th pct)2025-03-11
High vulnerability · 2025-02-11
CVE-2024-13813
Patch
CWE-732
High · CVSS 7.1
EPSS 0.2% (11th pct)2025-02-11
Medium vulnerability · 2024-11-13
CVE-2024-29211
Patch
Medium · CVSS 4.7
EPSS 0.3% (22th pct)2024-11-13
Medium vulnerability · 2024-11-13
CVE-2024-38654
Patch
CWE-125
Medium · CVSS 4.4
EPSS 0.3% (20th pct)2024-11-13
High vulnerability · 2024-11-13
CVE-2024-37398
Patch
High · CVSS 7.8
EPSS 0.3% (25th pct)2024-11-13
High vulnerability · 2024-11-12
CVE-2024-7571
Patch
CWE-267
High · CVSS 7.8
EPSS 0.3% (18th pct)2024-11-12
Medium vulnerability · 2024-11-12
CVE-2024-9843
Patch
CWE-126
Medium · CVSS 5.5
EPSS 0.3% (17th pct)2024-11-12
High vulnerability · 2024-11-12
CVE-2024-9842
Patch
CWE-732
High · CVSS 7.3
EPSS 0.2% (11th pct)2024-11-12
High vulnerability · 2024-11-12
CVE-2024-8539
Patch
CWE-267
High · CVSS 7.1
EPSS 0.2% (12th pct)2024-11-12
High vulnerability · 2024-05-31
CVE-2023-38042
Patch
CWE-250
High · CVSS 7.8
EPSS 0.3% (27th pct)2024-05-31
High vulnerability · 2024-05-31
CVE-2023-46810
Patch
CWE-269
High · CVSS 7.3
EPSS 0.3% (23th pct)2024-05-31
Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability
CVE-2023-34298
Patch
CWE-22
High · CVSS 7.8
EPSS 1.0% (59th pct)2024-05-03
High vulnerability · 2023-11-14
CVE-2023-41718
Patch
CWE-276
High · CVSS 7.8
EPSS 0.5% (38th pct)2023-11-14
High vulnerability · 2023-11-14
CVE-2023-35080
Patch
CWE-276
High · CVSS 7.8
EPSS 0.7% (51th pct)2023-11-14
Medium vulnerability · 2023-11-14
CVE-2023-38544
Patch
Medium · CVSS 5.5
EPSS 0.4% (30th pct)2023-11-14
High vulnerability · 2023-11-14
CVE-2023-38043
Patch
CWE-400
High · CVSS 7.8
EPSS 0.4% (30th pct)2023-11-14
High vulnerability · 2023-11-14
CVE-2023-38543
Patch
CWE-770
High · CVSS 7.8
EPSS 0.4% (30th pct)2023-11-14
High vulnerability · 2023-10-25
CVE-2023-38041
Patch
CWE-367
High · CVSS 7.0
EPSS 0.7% (50th pct)2023-10-25

Common weakness types

The CWE weakness categories most often found in Ivanti Secure Access Client CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Ivanti Secure Access Client CVEs were published each year.

2023

6

2024

10

2025

2

2026

3

Other Ivanti products

Browse vulnerabilities for other products by Ivanti.

Connect Secure132 CVEs Endpoint Manager119 CVEs avalanche117 CVEs Policy Secure78 CVEs EPM33 CVEs Endpoint Manager Mobile29 CVEs workspace control22 CVEs zero trust access gateway17 CVEs

All Ivanti vulnerabilities

Frequently asked questions

Common questions about Ivanti Secure Access Client vulnerabilities.

How many CVEs does Ivanti Secure Access Client have?: Ivanti Secure Access Client has 21 published CVE records since 2023.
How many Ivanti Secure Access Client CVEs are in CISA KEV?: None of Ivanti Secure Access Client's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Ivanti Secure Access Client vulnerabilities?: No Ivanti Secure Access Client CVEs currently have a tracked public exploit in this dataset.
Which versions of Ivanti Secure Access Client are affected?: 35 distinct Ivanti Secure Access Client versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Ivanti Secure Access Client CVEs?: Ivanti Secure Access Client's CVEs most often map to these CWE weakness types: CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-276 (Incorrect Default Permissions), CWE-267 (Privilege Defined With Unsafe Actions), CWE-250 (Execution with Unnecessary Privileges).
What is the average severity of Ivanti Secure Access Client CVEs?: The average CVSS base score across Ivanti Secure Access Client's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Ivanti Secure Access Client vulnerabilities

Monitor new Ivanti Secure Access Client vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing