Vendor
ivanti
413 known vulnerabilities.
Products
Avalanche 92
Endpoint Manager 73
Connect Secure 65
Policy Secure 52
EPM 33
Endpoint Manager Mobile 25
Secure Access Client 15
ZTA Gateway 15
Neurons for Secure Access 13
EPMM 11
Workspace Control 10
Sentry 10
Xtraction 8
CSA (Cloud Services Appliance) 6
Cloud Services Application 6
Neurons for ITSM 5
ICS 5
IPS 5
ITSM 5
Wavelink 4
Neurons for ZTA gateways 3
DSM 3
Ivanti Neurons for ITSM 3
Neurons for ITSM (Cloud) 3
MobileIron Core 2
Ivanti Endpoint Manager 2
Neurons for ITSM (On-Premise) 2
Secure Access Client Windows 2
Desktop and Server Management 2
Secure Access Linux 2
Security Controls 2
Neurons for Secure 2
Automation 2
Docs@Work 1
LANDesk Management Suite 1
Connect Secure 22.7R2.9 1
Patch SDK 1
Patch for Configuration Manager 1
Neurons for Patch Management 1
Neurons Agent Platform 1
220 results · Clear filters · Feed
-
High 7.2CVE-2026-105425 Public exploit
OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versi…
-
High 7.0CVE-2026-111357 Exploited
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, l…
KEV Oct 30, 2026 -
High 7.7
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a …
-
High 7.5
A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote …
-
High 8.6
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute ar…
KEV Oct 13, 2026 -
High 8.1
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated at…
-
High 8.8
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticate…
-
High 8.8
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticate…
-
High 8.8
Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and 12.8.0.4 allows a remot…
-
High 8.1
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a…
-
High 7.7
External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authentic…
-
High 7.5
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated a…
-
High 7.7
Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary fi…
-
High 7.2CVE-2026-10727 EPSS 13%
An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote au…
-
High 8.8
An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticat…
-
High 8.8
An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthent…
-
High 8.8
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attac…
-
High 7.8
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authent…
-
High 7.2
OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker wit…
-
High 7.8
A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privilege…
-
High 8.9
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unau…
-
High 7.0
An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthentica…
-
High 7.4
Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthe…
-
High 7.2
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenti…
KEV May 7, 2026 -
High 8.8CVE-2026-5786 EPSS 11%
An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remot…
-
High 7.8
An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate the…
-
High 8.6
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to…
KEV Mar 9, 2026 -
High 7.8
Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior to…
-
High 7.1
Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write…
-
High 8.8
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows …
-
High 7.1
Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticat…
-
High 7.2CVE-2025-10985 EPSS 21%
OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote …
-
High 7.2CVE-2025-10243 EPSS 21%
OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote …
-
High 7.2CVE-2025-10242 EPSS 21%
OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4 allows a remote …
-
High 8.8CVE-2025-9713 EPSS 16%
Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve r…
-
High 7.8
Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to es…
-
High 8.8
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti …
-
High 8.8
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti …
-
High 7.6
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti …
-
High 8.8
CSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway befor…