Skip to content
OpenAdvisories

Vendor

ivanti

413 known vulnerabilities.

Products

Avalanche 92 Endpoint Manager 73 Connect Secure 65 Policy Secure 52 EPM 33 Endpoint Manager Mobile 25 Secure Access Client 15 ZTA Gateway 15 Neurons for Secure Access 13 EPMM 11 Workspace Control 10 Sentry 10 Xtraction 8 CSA (Cloud Services Appliance) 6 Cloud Services Application 6 Neurons for ITSM 5 ICS 5 IPS 5 ITSM 5 Wavelink 4 Neurons for ZTA gateways 3 DSM 3 Ivanti Neurons for ITSM 3 Neurons for ITSM (Cloud) 3 MobileIron Core 2 Ivanti Endpoint Manager 2 Neurons for ITSM (On-Premise) 2 Secure Access Client Windows 2 Desktop and Server Management 2 Secure Access Linux 2 Security Controls 2 Neurons for Secure 2 Automation 2 Docs@Work 1 LANDesk Management Suite 1 Connect Secure 22.7R2.9 1 Patch SDK 1 Patch for Configuration Manager 1 Neurons for Patch Management 1 Neurons Agent Platform 1
All Critical High Medium Low Exploited only Public exploit

32 results · Clear filters · Feed

  • High 7.2
    CVE-2026-105425 Public exploit

    OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versi…

    ivanti Endpoint Manager Mobile Sentry Network devices
  • Critical 9.8
    CVE-2026-121653 Public exploit

    SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker t…

    ivanti Endpoint Manager Network devices
  • High 8.6
    CVE-2026-104935 Exploited Public exploit Scanner template EPSS 89%

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute ar…

    ivanti Connect Secure Network devices
    KEV Oct 13, 2026
  • Critical 9.9
    CVE-2026-10523 Public exploit EPSS 54%

    An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allo…

    ivanti Sentry Network devices
  • Critical 10.0
    CVE-2026-10520 Exploited Public exploit Scanner template EPSS 100%

    An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote…

    ivanti Sentry Network devices
    KEV Jun 11, 2026
  • Critical 9.8
    CVE-2026-1340 Exploited Public exploit Scanner template EPSS 99%

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    ivanti Endpoint Manager Mobile Network devices
    KEV Apr 8, 2026
  • Critical 9.8
    CVE-2026-1281 Exploited Public exploit Scanner template EPSS 99%

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    ivanti Endpoint Manager Mobile Network devices
    KEV Jan 29, 2026
  • High 7.2
    CVE-2025-4428 Exploited Public exploit EPSS 88%

    Remote Code Execution

    Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

    ivanti Endpoint Manager Mobile Network devices
    KEV May 19, 2025
  • Medium 5.3
    CVE-2025-4427 Exploited Public exploit Scanner template EPSS 100%

    Authentication Bypass

    An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

    ivanti Endpoint Manager Mobile Network devices
    KEV May 19, 2025
  • Critical 9.0
    CVE-2025-22457 Exploited · Ransomware Public exploit EPSS 100%

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.…

    ivanti Connect Secure Policy Secure Neurons for ZTA gateways Network devices
    KEV Apr 4, 2025
  • Critical 9.8
    CVE-2024-13159 Exploited Public exploit Scanner template EPSS 100%

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

    ivanti Endpoint Manager Network devices
    KEV Mar 10, 2025
  • Critical 9.0
    CVE-2025-0282 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.…

    ivanti Connect Secure Policy Secure Neurons for ZTA gateways Network devices
    KEV Jan 8, 2025
  • Critical 9.8
    CVE-2024-50330 Public exploit EPSS 40%

    SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

    ivanti Endpoint Manager Network devices
  • Critical 9.1
    CVE-2024-37404 Public exploit EPSS 71%

    Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy S…

    ivanti Connect Secure Policy Secure Network devices
  • Critical 9.4
    CVE-2024-8963 Exploited Public exploit Scanner template EPSS 99%

    Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted fun…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 19, 2024
  • Critical 10.0
    CVE-2024-29847 Public exploit EPSS 52%

    Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allow…

    ivanti EPM Network devices
  • High 7.2
    CVE-2024-8190 Exploited Public exploit EPSS 89%

    An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a rem…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 13, 2024
  • Critical 9.8
    CVE-2024-7593 Exploited Public exploit Scanner template EPSS 100%

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

    ivanti vTM Network devices
    KEV Sep 24, 2024
  • Critical 9.6
    CVE-2024-29824 Exploited Public exploit Scanner template EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
    KEV Oct 2, 2024
  • Medium 6.7
    CVE-2024-22026 Public exploit

    A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell r…

    ivanti EPMM Network devices
  • High 8.3
    CVE-2024-22024 Public exploit Scanner template EPSS 95%

    An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy S…

    ivanti Ivant IPS ICS Network devices
  • High 8.2
    CVE-2024-21893 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Polic…

    ivanti ICS IPS Network devices
    KEV Jan 31, 2024
  • High 8.2
    CVE-2023-46805 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a r…

    ivanti ICS IPS Network devices
    KEV Jan 10, 2024
  • Critical 9.1
    CVE-2024-21887 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,…

    ivanti ICS IPS Network devices
    KEV Jan 10, 2024
  • High 8.8
    CVE-2023-35080 Public exploit

    A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticat…

    ivanti Secure Access Client Network devices
  • High 8.8
    CVE-2022-44569 Public exploit

    A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communicat…

    ivanti Automation Network devices
  • High 7.8
    CVE-2023-38041 Public exploit

    A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a …

    ivanti Secure Access Client Network devices
  • Critical 9.8
    CVE-2023-38035 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an…

    ivanti MobileIron Sentry Network devices
    KEV Aug 22, 2023
  • Critical 10.0
    CVE-2023-35082 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted f…

    ivanti EPMM Network devices
    KEV Jan 18, 2024
  • High 8.8
    CVE-2023-32560 Public exploit EPSS 99%

    An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disru…

    ivanti Avalanche Network devices
  • Critical 10.0
    CVE-2023-35078 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or r…

    ivanti Endpoint Manager Mobile Network devices
    KEV Jul 25, 2023
  • High 8.2
    CVE-2023-28324 Public exploit EPSS 13%

    A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege e…

    ivanti Ivanti Endpoint Manager Network devices