ivanti

12 results · Clear filters · Feed

• High 7.2
  CVE-2026-105425 Public exploit

  OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versi…

  ivanti Endpoint Manager Mobile Sentry Network devices
  Nov 10, 2026
• High 8.6
  CVE-2026-104935 Exploited Public exploit Scanner template EPSS 89%

  Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute ar…

  ivanti Connect Secure Network devices
  Oct 13, 2026

  KEV Oct 13, 2026
• High 7.2
  CVE-2025-4428 Exploited Public exploit EPSS 88%

  Remote Code Execution

  Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

  ivanti Endpoint Manager Mobile Network devices
  May 13, 2025

  KEV May 19, 2025
• High 7.2
  CVE-2024-8190 Exploited Public exploit EPSS 89%

  An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a rem…

  ivanti CSA (Cloud Services Appliance) Network devices
  Sep 10, 2024

  KEV Sep 13, 2024
• High 8.3
  CVE-2024-22024 Public exploit Scanner template EPSS 95%

  An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy S…

  ivanti Ivant IPS ICS Network devices
  Feb 13, 2024
• High 8.2
  CVE-2024-21893 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Polic…

  ivanti ICS IPS Network devices
  Jan 31, 2024

  KEV Jan 31, 2024
• High 8.2
  CVE-2023-46805 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a r…

  ivanti IPS ICS Network devices
  Jan 12, 2024

  KEV Jan 10, 2024
• High 8.8
  CVE-2023-35080 Public exploit

  A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticat…

  ivanti Secure Access Client Network devices
  Nov 14, 2023
• High 8.8
  CVE-2022-44569 Public exploit

  A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communicat…

  ivanti Automation Network devices
  Nov 3, 2023
• High 7.8
  CVE-2023-38041 Public exploit

  A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a …

  ivanti Secure Access Client Network devices
  Oct 25, 2023
• High 8.8
  CVE-2023-32560 Public exploit EPSS 99%

  An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disru…

  ivanti Avalanche Network devices
  Aug 10, 2023
• High 8.2
  CVE-2023-28324 Public exploit EPSS 13%

  A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege e…

  ivanti Ivanti Endpoint Manager Network devices
  Jun 30, 2023