# Ivanti Policy Secure


- [CVE-2024-21887](https://insights.sbomify.com/CVE-2024-21887/): Ivanti Connect Secure and Policy Secure Command Injection (critical 9.1, exploited in the wild)
- [CVE-2025-22457](https://insights.sbomify.com/CVE-2025-22457/): Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow (critical 9.0, exploited in the wild)
- [CVE-2025-0282](https://insights.sbomify.com/CVE-2025-0282/): Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow (critical 9.0, exploited in the wild)
- [CVE-2024-21893](https://insights.sbomify.com/CVE-2024-21893/): Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) (high 8.2, exploited in the wild)
- [CVE-2023-46805](https://insights.sbomify.com/CVE-2023-46805/): Ivanti Connect Secure and Policy Secure Authentication Bypass (high 8.2, exploited in the wild)
- [CVE-2019-11539](https://insights.sbomify.com/CVE-2019-11539/): Ivanti Pulse Connect Secure and Policy Secure Command Injection (high 8.0, exploited in the wild)
- [CVE-2020-8243](https://insights.sbomify.com/CVE-2020-8243/): Ivanti Pulse Connect Secure Code Execution (high 7.2, exploited in the wild)
- [CVE-2020-8218](https://insights.sbomify.com/CVE-2020-8218/): Pulse Connect Secure Code Injection (high 7.2, exploited in the wild)
- [CVE-2024-38657](https://insights.sbomify.com/CVE-2024-38657/): Path traversal in Connect Secure (critical 9.1)
- [CVE-2024-10644](https://insights.sbomify.com/CVE-2024-10644/): Code injection in Connect Secure (critical 9.1)
- [CVE-2024-11634](https://insights.sbomify.com/CVE-2024-11634/): Command injection in Connect Secure (critical 9.1)
- [CVE-2024-38655](https://insights.sbomify.com/CVE-2024-38655/): Command injection in Connect Secure (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/products/ivanti/policy-secure/