Skip to content
OpenAdvisories

Vendor

ivanti

413 known vulnerabilities.

Products

Avalanche 92 Endpoint Manager 73 Connect Secure 65 Policy Secure 52 EPM 33 Endpoint Manager Mobile 25 Secure Access Client 15 ZTA Gateway 15 Neurons for Secure Access 13 EPMM 11 Workspace Control 10 Sentry 10 Xtraction 8 CSA (Cloud Services Appliance) 6 Cloud Services Application 6 Neurons for ITSM 5 ICS 5 IPS 5 ITSM 5 Wavelink 4 Neurons for ZTA gateways 3 DSM 3 Ivanti Neurons for ITSM 3 Neurons for ITSM (Cloud) 3 MobileIron Core 2 Ivanti Endpoint Manager 2 Neurons for ITSM (On-Premise) 2 Secure Access Client Windows 2 Desktop and Server Management 2 Secure Access Linux 2 Security Controls 2 Neurons for Secure 2 Automation 2 Docs@Work 1 LANDesk Management Suite 1 Connect Secure 22.7R2.9 1 Patch SDK 1 Patch for Configuration Manager 1 Neurons for Patch Management 1 Neurons Agent Platform 1
All Critical High Medium Low Exploited only Public exploit

28 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-118527 Exploited

    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticat…

    ivanti Connect Secure Network devices
    KEV Oct 30, 2026
  • High 7.0
    CVE-2026-111357 Exploited

    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, l…

    ivanti Connect Secure Network devices
    KEV Oct 30, 2026
  • High 8.6
    CVE-2026-104935 Exploited Public exploit Scanner template EPSS 89%

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute ar…

    ivanti Connect Secure Network devices
    KEV Oct 13, 2026
  • Critical 10.0
    CVE-2026-10520 Exploited Public exploit Scanner template EPSS 100%

    An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote…

    ivanti Sentry Network devices
    KEV Jun 11, 2026
  • High 7.2
    CVE-2026-6973 Exploited EPSS 34%

    An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenti…

    ivanti Endpoint Manager Mobile Network devices
    KEV May 7, 2026
  • High 8.6
    CVE-2026-1603 Exploited Scanner template EPSS 88%

    An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to…

    ivanti Endpoint Manager Network devices
    KEV Mar 9, 2026
  • Critical 9.8
    CVE-2026-1340 Exploited Public exploit Scanner template EPSS 99%

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    ivanti Endpoint Manager Mobile Network devices
    KEV Apr 8, 2026
  • Critical 9.8
    CVE-2026-1281 Exploited Public exploit Scanner template EPSS 99%

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    ivanti Endpoint Manager Mobile Network devices
    KEV Jan 29, 2026
  • High 7.2
    CVE-2025-4428 Exploited Public exploit EPSS 88%

    Remote Code Execution

    Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

    ivanti Endpoint Manager Mobile Network devices
    KEV May 19, 2025
  • Medium 5.3
    CVE-2025-4427 Exploited Public exploit Scanner template EPSS 100%

    Authentication Bypass

    An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.

    ivanti Endpoint Manager Mobile Network devices
    KEV May 19, 2025
  • Critical 9.0
    CVE-2025-22457 Exploited · Ransomware Public exploit EPSS 100%

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.…

    ivanti Connect Secure Policy Secure Neurons for ZTA gateways Network devices
    KEV Apr 4, 2025
  • Critical 9.8
    CVE-2024-13159 Exploited Public exploit Scanner template EPSS 100%

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

    ivanti Endpoint Manager Network devices
    KEV Mar 10, 2025
  • Critical 9.8
    CVE-2024-13160 Exploited Scanner template EPSS 91%

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

    ivanti Endpoint Manager Network devices
    KEV Mar 10, 2025
  • Critical 9.8
    CVE-2024-13161 Exploited Scanner template EPSS 90%

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security U…

    ivanti Endpoint Manager Network devices
    KEV Mar 10, 2025
  • Critical 9.0
    CVE-2025-0282 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.…

    ivanti Connect Secure Policy Secure Neurons for ZTA gateways Network devices
    KEV Jan 8, 2025
  • High 7.2
    CVE-2024-9380 Exploited EPSS 58%

    An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authe…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Oct 9, 2024
  • Medium 6.5
    CVE-2024-9379 Exploited EPSS 44%

    SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with a…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Oct 9, 2024
  • Critical 9.4
    CVE-2024-8963 Exploited Public exploit Scanner template EPSS 99%

    Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted fun…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 19, 2024
  • High 7.2
    CVE-2024-8190 Exploited Public exploit EPSS 89%

    An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a rem…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 13, 2024
  • Critical 9.8
    CVE-2024-7593 Exploited Public exploit Scanner template EPSS 100%

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a rem…

    ivanti vTM Network devices
    KEV Sep 24, 2024
  • Critical 9.6
    CVE-2024-29824 Exploited Public exploit Scanner template EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
    KEV Oct 2, 2024
  • High 8.2
    CVE-2024-21893 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Polic…

    ivanti ICS IPS Network devices
    KEV Jan 31, 2024
  • High 8.2
    CVE-2023-46805 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a r…

    ivanti IPS ICS Network devices
    KEV Jan 10, 2024
  • Critical 9.1
    CVE-2024-21887 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,…

    ivanti IPS ICS Network devices
    KEV Jan 10, 2024
  • Critical 9.8
    CVE-2023-38035 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an…

    ivanti MobileIron Sentry Network devices
    KEV Aug 22, 2023
  • Critical 10.0
    CVE-2023-35082 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted f…

    ivanti EPMM Network devices
    KEV Jan 18, 2024
  • High 7.2
    CVE-2023-35081 Exploited EPSS 64%

    A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) a…

    ivanti EPMM Network devices
    KEV Jul 31, 2023
  • Critical 10.0
    CVE-2023-35078 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or r…

    ivanti Endpoint Manager Mobile Network devices
    KEV Jul 25, 2023