Skip to content
OpenAdvisories

Vendor

ivanti

413 known vulnerabilities.

Products

Avalanche 92 Endpoint Manager 73 Connect Secure 65 Policy Secure 52 EPM 33 Endpoint Manager Mobile 25 Secure Access Client 15 ZTA Gateway 15 Neurons for Secure Access 13 EPMM 11 Workspace Control 10 Sentry 10 Xtraction 8 CSA (Cloud Services Appliance) 6 Cloud Services Application 6 Neurons for ITSM 5 ICS 5 IPS 5 ITSM 5 Wavelink 4 Neurons for ZTA gateways 3 DSM 3 Ivanti Neurons for ITSM 3 Neurons for ITSM (Cloud) 3 MobileIron Core 2 Ivanti Endpoint Manager 2 Neurons for ITSM (On-Premise) 2 Secure Access Client Windows 2 Desktop and Server Management 2 Secure Access Linux 2 Security Controls 2 Neurons for Secure 2 Automation 2 Docs@Work 1 LANDesk Management Suite 1 Connect Secure 22.7R2.9 1 Patch SDK 1 Patch for Configuration Manager 1 Neurons for Patch Management 1 Neurons Agent Platform 1
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-121653 Public exploit

    SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker t…

    ivanti Endpoint Manager Network devices
  • Critical 9.9
    CVE-2026-10523 Public exploit EPSS 54%

    An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allo…

    ivanti Sentry Network devices
  • Critical 10.0
    CVE-2026-10520 Exploited Public exploit Scanner template EPSS 100%

    An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote…

    ivanti Sentry Network devices
    KEV Jun 11, 2026
  • Critical 9.8
    CVE-2026-1340 Exploited Public exploit Scanner template EPSS 99%

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    ivanti Endpoint Manager Mobile Network devices
    KEV Apr 8, 2026
  • Critical 9.8
    CVE-2026-1281 Exploited Public exploit Scanner template EPSS 99%

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    ivanti Endpoint Manager Mobile Network devices
    KEV Jan 29, 2026
  • Critical 9.0
    CVE-2025-22457 Exploited · Ransomware Public exploit EPSS 100%

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.…

    ivanti Connect Secure Policy Secure Neurons for ZTA gateways Network devices
    KEV Apr 4, 2025
  • Critical 9.8
    CVE-2024-13159 Exploited Public exploit Scanner template EPSS 100%

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

    ivanti Endpoint Manager Network devices
    KEV Mar 10, 2025
  • Critical 9.0
    CVE-2025-0282 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.…

    ivanti Connect Secure Policy Secure Neurons for ZTA gateways Network devices
    KEV Jan 8, 2025
  • Critical 9.8
    CVE-2024-50330 Public exploit EPSS 40%

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

    ivanti Endpoint Manager Network devices
  • Critical 9.1
    CVE-2024-37404 Public exploit EPSS 71%

    Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy S…

    ivanti Connect Secure Policy Secure Network devices
  • Critical 9.4
    CVE-2024-8963 Exploited Public exploit Scanner template EPSS 99%

    Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted fun…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 19, 2024
  • Critical 10.0
    CVE-2024-29847 Public exploit EPSS 52%

    Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allow…

    ivanti EPM Network devices
  • Critical 9.8
    CVE-2024-7593 Exploited Public exploit Scanner template EPSS 100%

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

    ivanti vTM Network devices
    KEV Sep 24, 2024
  • Critical 9.6
    CVE-2024-29824 Exploited Public exploit Scanner template EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
    KEV Oct 2, 2024
  • Critical 9.1
    CVE-2024-21887 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,…

    ivanti IPS ICS Network devices
    KEV Jan 10, 2024
  • Critical 9.8
    CVE-2023-38035 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an…

    ivanti MobileIron Sentry Network devices
    KEV Aug 22, 2023
  • Critical 10.0
    CVE-2023-35082 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted f…

    ivanti EPMM Network devices
    KEV Jan 18, 2024
  • Critical 10.0
    CVE-2023-35078 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or r…

    ivanti Endpoint Manager Mobile Network devices
    KEV Jul 25, 2023