[ Vendor · 53 CVEs ]
Ivanti
CVEs affecting Ivanti published in the last 30 days, plus any Ivanti CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111357 | 15 Oct 2026 | CVSS 7.0 | Ivanti Connect SecureIvanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation… | |
| CVE-2026-109412 | 13 Oct 2026 | CVSS 9.9 | Ivanti Neurons Patch for IntuneAn exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information. | Fix |
| CVE-2026-106034 | 13 Oct 2026 | CVSS 5.0 | Ivanti XtractionA Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary… | Fix |
| CVE-2026-106035 | 13 Oct 2026 | CVSS 5.5 | Ivanti XtractionAn Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker… | Fix |
| CVE-2026-106042 | 13 Oct 2026 | CVSS 9.9 | Ivanti XtractionAn External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect… | Fix |
| CVE-2026-106043 | 13 Oct 2026 | CVSS 7.5 | Ivanti XtractionA Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to… | Fix |
| CVE-2026-106047 | 13 Oct 2026 | CVSS 7.7 | Ivanti XtractionA Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker… | Fix |
| CVE-2026-104935 | 13 Oct 2026 | CVSS 8.6 | Ivanti Connect Secure authentication bypass allows remote commandsAuthentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does… | ExploitedFix |
| CVE-2026-10520 | 9 Jun 2026 | CVSS 10.0 | Ivanti Sentry OS Command InjectionAn OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to… | ExploitedFix |
| CVE-2026-10520 | 9 Jun 2026 | CVSS 10.0 | Ivanti Sentry OS Command InjectionAn OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to… | ExploitedFix |
| CVE-2026-6973 | 7 May 2026 | CVSS 7.2 | Ivanti Endpoint Manager Mobile (EPMM) Improper Input ValidationAn Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative… | Exploited |
| CVE-2026-1603 | 10 Feb 2026 | CVSS 7.5 | Ivanti Endpoint Manager (EPM) Authentication BypassAn authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored… | Exploited |
| CVE-2026-1281 | 29 Jan 2026 | CVSS 9.8 | Ivanti Endpoint Manager Mobile (EPMM) Code InjectionA code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. | ExploitedFix |
| CVE-2026-1340 | 29 Jan 2026 | CVSS 9.8 | Ivanti Endpoint Manager Mobile (EPMM) Code InjectionA code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution. | Exploited |
| CVE-2025-4427 | 13 May 2025 | CVSS 7.5 | Ivanti Endpoint Manager Mobile (EPMM) Authentication BypassAn authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources… | Exploited |
| CVE-2025-4428 | 13 May 2025 | CVSS 8.8 | Ivanti Endpoint Manager Mobile (EPMM) Code InjectionRemote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers… | Exploited |
| CVE-2025-22457 | 3 Apr 2025 | CVSS 9.8 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer OverflowA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways… | Exploited |
| CVE-2024-13159 | 14 Jan 2025 | CVSS 7.5 | Ivanti Endpoint Manager (EPM) Absolute Path TraversalAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote… | Exploited |
| CVE-2024-13160 | 14 Jan 2025 | CVSS 7.5 | Ivanti Endpoint Manager (EPM) Absolute Path TraversalAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote… | Exploited |
| CVE-2024-13161 | 14 Jan 2025 | CVSS 7.5 | Ivanti Endpoint Manager (EPM) Absolute Path TraversalAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote… | Exploited |
| CVE-2025-0282 | 8 Jan 2025 | CVSS 9.0 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer OverflowA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for… | Exploited |
| CVE-2024-9379 | 8 Oct 2024 | CVSS 7.2 | Ivanti Cloud Services Appliance (CSA) SQL InjectionSQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run… | Exploited |
| CVE-2024-9380 | 8 Oct 2024 | CVSS 7.2 | Ivanti Cloud Services Appliance (CSA) OS Command InjectionAn OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin… | Exploited |
| CVE-2024-9380 | 8 Oct 2024 | CVSS 7.2 | Ivanti Cloud Services Appliance (CSA) OS Command InjectionAn OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin… | Exploited |
| CVE-2024-8963 | 19 Sep 2024 | CVSS 9.1 | Ivanti Cloud Services Appliance (CSA) Path TraversalPath Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. | Exploited |
| CVE-2024-8963 | 19 Sep 2024 | CVSS 9.1 | Ivanti Cloud Services Appliance (CSA) Path TraversalPath Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. | Exploited |
| CVE-2024-8190 | 10 Sep 2024 | CVSS 7.2 | Ivanti Cloud Services Appliance OS Command InjectionAn OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to… | Exploited |
| CVE-2024-8190 | 10 Sep 2024 | CVSS 7.2 | Ivanti Cloud Services Appliance OS Command InjectionAn OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to… | Exploited |
| CVE-2024-7593 | 13 Aug 2024 | CVSS 9.8 | Ivanti Virtual Traffic Manager Authentication BypassIncorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker… | ExploitedFix |
| CVE-2024-7593 | 13 Aug 2024 | CVSS 9.8 | Ivanti Virtual Traffic Manager Authentication BypassIncorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker… | ExploitedFix |
| CVE-2024-29824 | 31 May 2024 | CVSS 8.8 | Ivanti Endpoint Manager (EPM) SQL InjectionAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network… | Exploited |
| CVE-2024-29824 | 31 May 2024 | CVSS 8.8 | Ivanti Endpoint Manager (EPM) SQL InjectionAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network… | Exploited |
| CVE-2024-21893 | 31 Jan 2024 | CVSS 8.2 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF)A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and… | Exploited |
| CVE-2024-21893 | 31 Jan 2024 | CVSS 8.2 | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF)A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and… | Exploited |
| CVE-2024-21887 | 12 Jan 2024 | CVSS 9.1 | Ivanti Connect Secure and Policy Secure Command InjectionA command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated… | Exploited |
| CVE-2023-46805 | 12 Jan 2024 | CVSS 8.2 | Ivanti Connect Secure and Policy Secure Authentication BypassAn authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access… | Exploited |
| CVE-2023-38035 | 21 Aug 2023 | CVSS 9.8 | Ivanti Sentry Authentication BypassA security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass… | Exploited |
| CVE-2023-38035 | 21 Aug 2023 | CVSS 9.8 | Ivanti Sentry Authentication BypassA security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass… | Exploited |
| CVE-2023-35082 | 15 Aug 2023 | CVSS 9.8 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication BypassAn authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of… | Exploited |
| CVE-2023-35081 | 3 Aug 2023 | CVSS 7.2 | Ivanti Endpoint Manager Mobile (EPMM) Path TraversalA path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated… | Exploited |
| CVE-2023-35078 | 25 Jul 2023 | CVSS 9.8 | Ivanti Endpoint Manager Mobile Authentication BypassAn authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application… | Exploited |
| CVE-2023-35078 | 25 Jul 2023 | CVSS 9.8 | Ivanti Endpoint Manager Mobile Authentication BypassAn authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application… | Exploited |
| CVE-2021-44529 | 8 Dec 2021 | CVSS 9.8 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code InjectionA code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited… | ExploitedFix |
| CVE-2021-44529 | 8 Dec 2021 | CVSS 9.8 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code InjectionA code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited… | ExploitedFix |
| CVE-2021-22894 | 27 May 2021 | CVSS 8.8 | Ivanti Pulse Connect Secure Collaboration Suite Buffer OverflowA buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as… | Exploited |
| CVE-2021-22899 | 27 May 2021 | CVSS 8.8 | Ivanti Pulse Connect Secure Command InjectionA command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code… | Exploited |
| CVE-2021-22900 | 27 May 2021 | CVSS 7.2 | Ivanti Pulse Connect Secure Unrestricted File UploadA vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to… | Exploited |
| CVE-2021-22893 | 23 Apr 2021 | CVSS 10.0 | Ivanti Pulse Connect Secure Use-After-FreePulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and… | Exploited |
| CVE-2020-8260 | 28 Oct 2020 | CVSS 7.2 | Ivanti Pulse Connect Secure Code ExecutionA vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution… | Exploited |
| CVE-2020-8243 | 30 Sep 2020 | CVSS 7.2 | Ivanti Pulse Connect Secure Code ExecutionA vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform… | Exploited |
| CVE-2020-15505 | 7 Jul 2020 | CVSS 9.8 | Ivanti MobileIron Multiple Products Remote Code ExecutionA remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0… | Exploited |
| CVE-2019-11510 | 8 May 2019 | CVSS 10.0 | Ivanti Pulse Connect Secure Arbitrary File ReadIn Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can… | ExploitedFix |
| CVE-2019-11539 | 26 Apr 2019 | CVSS 7.2 | Ivanti Pulse Connect Secure and Policy Secure Command InjectionIn Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse… | Exploited |