PT-2025-28482 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue allows a remote authenticated attacker with admin rights to access internal network services. This is due to a Server-Side...

Ivanti Connect Secure and Ivanti Policy Secure have injection vulnerabilities

Ivanti Connect Secure ICS and Ivanti Policy Secure IPS are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. An injection vulnerability exists in Ivanti Connect Secure version...

PT-2025-28483 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk through CLRF...

CVE-2025-5464: Insertion of Sensitive Information into Log File

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...

Ivanti Connect Secure and Ivanti Policy Secure code-related vulnerabilities

Ivanti Connect Secure ICS and Ivanti Policy Secure IPS are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A code issue vulnerability exists in Ivanti Connect Secure version...

CVE-2025-0293: Improper Neutralization of CRLF Sequences

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk...

CVE-2025-0292: Server-Side Request Forgery (SSRF)

SSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to access internal network services...

CVE-2025-5451: Stack-based Buffer Overflow

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to trigger a denial of service...

CVE-2025-5450: Client-Side Enforcement of Server-Side Security

Improper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated admin with read-only rights to modify settings that should be restricted...

CVE-2025-5463: Insertion of Sensitive Information into Log File

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information...

CVE-2025-27203: Deserialization of Untrusted Data

Adobe Connect versions 24.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could lead to arbitrary code execution by an attacker. Exploitation of this issue does require user interaction and scope is changed...

PT-2025-28485 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Description: The issue allows a local authenticated attacker to obtain sensitive information that has been inserted into a log file. Recommendations: For versions prior to 22.7R2.8, update to...

Ivanti Connect Secure log information leakage vulnerability

Ivanti Connect Secure ICS is a secure remote network connectivity tool from Ivanti Corporation, USA. A log information disclosure vulnerability exists in Ivanti Connect Secure versions prior to 22.7R2.8 and Ivanti Policy Secure versions prior to 22.7R1.5, which stems from the insertion of sensiti...

Adobe Connect code-related vulnerabilities

Adobe Connect is a software used to create conferencing environments by Adobe USA. A code issue vulnerability exists in Adobe Connect 24.0 and prior versions that stems from deserialization of untrusted data could lead to arbitrary code execution, requiring user interaction and scope changes...

PT-2025-28476 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue is related to improper access control in the certificate management component. This allows a remote authenticated admin wi...

PT-2025-28478 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: The issue allows a local authenticated attacker to obtain sensitive information that has been inserted into a log file...

Ivanti Connect Secure log information leakage vulnerability

Ivanti Connect Secure ICS is a secure remote network connectivity tool from Ivanti Corporation, USA. A log information disclosure vulnerability exists in Ivanti Connect Secure versions prior to 22.7R2.8, which originates when sensitive information is inserted into a log file, potentially leading ...

PT-2025-28758

Name of the Vulnerable Software and Affected Versions: Adobe Connect versions 24.0 and earlier Description: Adobe Connect versions 24.0 and earlier are susceptible to a Deserialization of Untrusted Data issue. Successful exploitation of this issue could allow an attacker to execute arbitrary code...

PT-2025-28477 · Ivanti · Ivanti Connect Secure +1

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.8 Ivanti Policy Secure versions prior to 22.7R1.5 Description: A stack-based buffer overflow allows a remote authenticated attacker with admin rights to trigger a denial of service...

APSB25-61 : Security update available for Adobe Connect

Adobe has released a security update for Adobe Connect. This update resolves a critical vulnerability that could lead to arbitrary code execution...