Class familyIvanti · Pulse Connect Secure
Ivanti Connect Secure code injection flaws, 2020–2025
4 Pulse Connect Secure CVEs with CWE-94 weaknesses, 30 Sep 2020 to 11 Feb 2025. 3 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2020’20
2 2021’21
2022’22
2023’23
2024’24
1 2025’25
In CISA KEVNot in KEV
20201 CVE, 1 in KEV
20212 CVEs, 2 in KEV
20251 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2020-8243KEV | 30 Sep 2020 | Ivanti Pulse Connect Secure Code Execution Vulnerability | Grouped by weakness | 76.9 |
| CVE-2021-22894KEV | 27 May 2021 | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | Grouped by weakness | 67.8 |
| CVE-2021-22900KEV | 27 May 2021 | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | Grouped by weakness | 66.2 |
| CVE-2024-10644 | 11 Feb 2025 | Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3… | Grouped by weakness | 23.7 |