Lucene search
+L

EUVD-2024-19629

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 23 Views

XML entity expansion vulnerability in SAML of Ivanti products allows for resource exhaustion and DoS

Related
Affected
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
Ivanti Connect Secure IPSec Code Execution
4 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC
Ivanti Connect Secure SAML DoS
19 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC
Ivanti Connect Secure IPSec DoS
19 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC
Ivanti Connect Secure IPSec DoS
19 Apr 202400:00
–bdu_fstec
circl
Circl
CVE-2024-21894
4 Apr 202407:03
–circl
circl
Circl
CVE-2024-22023
4 Apr 202411:29
–circl
circl
Circl
CVE-2024-22052
4 Apr 202411:29
–circl
circl
Circl
CVE-2024-22053
4 Apr 202411:29
–circl
cisa
CISA
Ivanti Releases Security Update for Ivanti Connect Secure and Policy Secure Gateways
4 Apr 202412:00
–cisa
cnnvd
CNNVD
Ivanti Connect Secure and Ivanti Policy Secure have security vulnerabilities
25 Apr 202400:00
–cnnvd
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "42ebcd25-8fa9-3760-b635-4f3581609fe5",
        "vendor": {
          "name": "Ivanti"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "01eee59d-3d50-3177-8426-893b203b5cb6",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "9.1R15.4 <9.1R15.4"
      },
      {
        "id": "23a4548d-010e-366b-a4d2-e94801014d9c",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "9.1R14.6 <9.1R14.6"
      },
      {
        "id": "24eebe67-c2c1-3203-8f02-b51be6d4dd71",
        "product": {
          "name": "Connect Secure"
        }
      },
      {
        "id": "3c1993aa-5ceb-3bc1-81eb-dd27ec4b1584",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "22.2R4.2 <22.2R4.2"
      },
      {
        "id": "3ee3ac5e-afea-3ae4-bf32-d84f42d9e42a",
        "product": {
          "name": "Policy Secure"
        },
        "product_version": "22.6R1.2 <22.6R1.2"
      },
      {
        "id": "57dc894e-5191-3f2f-a9f8-e31e164587bf",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "22.5R1.3 <22.5R1.3"
      },
      {
        "id": "6a54eaba-019b-33ec-bf50-a144813764aa",
        "product": {
          "name": "Policy Secure"
        },
        "product_version": "9.1R16.4 <9.1R16.4"
      },
      {
        "id": "83b08696-f663-3cd3-b21a-e3e14ea42ca3",
        "product": {
          "name": "Policy Secure"
        },
        "product_version": "22.5R1.3 <22.5R1.3"
      },
      {
        "id": "8ca60642-a2b3-33fe-8e45-73a6b4abdf51",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "22.6R2.3 <22.6R2.3"
      },
      {
        "id": "a95c73b8-6be9-3066-8f9e-d6d16cbcaaee",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "9.1R18.5 <9.1R18.5"
      },
      {
        "id": "b1630746-3704-3e9b-891b-6862cf692bc6",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "22.4R1.2 <22.4R1.2"
      },
      {
        "id": "b782aa10-afc0-30b7-acdf-a9224e42d2c0",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "22.5R2.4 <22.5R2.4"
      },
      {
        "id": "bb7ebda2-ba9d-36b6-87e2-3aa027713b72",
        "product": {
          "name": "Policy Secure"
        },
        "product_version": "9.1R17.4 <9.1R17.4"
      },
      {
        "id": "be806717-a04f-38ed-b1f1-2f3d9bbd89d5",
        "product": {
          "name": "Policy Secure"
        },
        "product_version": "22.4R1.2 <22.4R1.2"
      },
      {
        "id": "d35ca09b-d855-3d83-913a-e9a32682fe71",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "22.3R1.2 <22.3R1.2"
      },
      {
        "id": "d7d417a9-32f7-3ed4-8b1b-8fb6afe04548",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "9.1R16.4 <9.1R16.4"
      },
      {
        "id": "dcf2dc43-d7ea-3e85-9803-3d0f382e56d7",
        "product": {
          "name": "Policy Secure"
        },
        "product_version": "9.1R18.5 <9.1R18.5"
      },
      {
        "id": "e731ee46-b99b-3867-94e6-8f0d1bfcaef3",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "22.4R2.4 <22.4R2.4"
      },
      {
        "id": "e963671a-095a-3d99-ab24-6c089ebabca6",
        "product": {
          "name": "Policy Secure"
        }
      },
      {
        "id": "f388c788-110f-3599-8a88-fc5a053cfe9e",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "22.1R6.2 <22.1R6.2"
      },
      {
        "id": "f62639d5-0848-3207-9518-c4f67dd9ba2f",
        "product": {
          "name": "Connect Secure"
        },
        "product_version": "9.1R17.4 <9.1R17.4"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
7.1High risk
Vulners AI Score7.1
CVSS 35.3 - 8.2
CVSS 3.19.8
EPSS0.18987
SSVC
23