Ivanti Secure Access Client
15 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-8992 | corrigé en 22.8R6 | An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to ex | HIGH 8.8 | 0.6 % | ||
| CVE-2026-7432 | corrigé en 22.8R6 | A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM | HIGH 7.8 | 0.3 % | ||
| CVE-2026-7431 | corrigé en 22.8R6 | An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to | MEDIUM 4.4 | 0.2 % | ||
| CVE-2025-22454 | corrigé en 22.7R4, 22.8R1 | Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their | HIGH 7.8 | 0.3 % | ||
| CVE-2024-13813 | corrigé en 22.8R1 | Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary file | HIGH 7.1 | 0.2 % | ||
| CVE-2024-38654 | 22.7R3 – < 22.7R3 | Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to | MEDIUM 4.4 | 0.3 % | ||
| CVE-2024-37398 | 22.7R4 – < 22.7R4 | Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges. | HIGH 7.8 | 0.3 % | ||
| CVE-2024-29211 | 22.7R4 – < 22.7R4 | A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuratio | HIGH 7.1 | 0.3 % | ||
| CVE-2024-7571 | corrigé en 22.7R4 | Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges. | HIGH 7.8 | 0.3 % | ||
| CVE-2024-9843 | corrigé en 22.7R4 | A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service. | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-9842 | corrigé en 22.7R4 | Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders | HIGH 7.3 | 0.2 % | ||
| CVE-2024-8539 | corrigé en 22.7R3 | Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive config | HIGH 7.1 | 0.2 % | ||
| CVE-2023-38042 | 22.7R1 – < 22.7R1 | A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM | HIGH 7.8 | 0.3 % | ||
| CVE-2023-35080 | 22.6.1.1 – < 22.6.1.1 | A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploi | HIGH 8.8 | 0.7 % | ||
| CVE-2023-38041 | 22.6R1 – < 22.6R1 | A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a particular process fl | HIGH 7.8 | 0.7 % |