Skip to content
OpenAdvisories

Vendor

ivanti

413 known vulnerabilities.

Products

Avalanche 92 Endpoint Manager 73 Connect Secure 65 Policy Secure 52 EPM 33 Endpoint Manager Mobile 25 Secure Access Client 15 ZTA Gateway 15 Neurons for Secure Access 13 EPMM 11 Workspace Control 10 Sentry 10 Xtraction 8 CSA (Cloud Services Appliance) 6 Cloud Services Application 6 Neurons for ITSM 5 ICS 5 IPS 5 ITSM 5 Wavelink 4 Neurons for ZTA gateways 3 DSM 3 Ivanti Neurons for ITSM 3 Neurons for ITSM (Cloud) 3 MobileIron Core 2 Ivanti Endpoint Manager 2 Neurons for ITSM (On-Premise) 2 Secure Access Client Windows 2 Desktop and Server Management 2 Secure Access Linux 2 Security Controls 2 Neurons for Secure 2 Automation 2 Docs@Work 1 LANDesk Management Suite 1 Connect Secure 22.7R2.9 1 Patch SDK 1 Patch for Configuration Manager 1 Neurons for Patch Management 1 Neurons Agent Platform 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.0
    CVE-2026-111357 Exploited

    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, l…

    ivanti Connect Secure Network devices
    KEV Oct 30, 2026
  • High 8.6
    CVE-2026-104935 Exploited Public exploit Scanner template EPSS 89%

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute ar…

    ivanti Connect Secure Network devices
    KEV Oct 13, 2026
  • High 7.2
    CVE-2026-6973 Exploited EPSS 34%

    An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenti…

    ivanti Endpoint Manager Mobile Network devices
    KEV May 7, 2026
  • High 8.6
    CVE-2026-1603 Exploited Scanner template EPSS 88%

    An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to…

    ivanti Endpoint Manager Network devices
    KEV Mar 9, 2026
  • High 7.2
    CVE-2025-4428 Exploited Public exploit EPSS 88%

    Remote Code Execution

    Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

    ivanti Endpoint Manager Mobile Network devices
    KEV May 19, 2025
  • High 7.2
    CVE-2024-9380 Exploited EPSS 58%

    An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authe…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Oct 9, 2024
  • High 7.2
    CVE-2024-8190 Exploited Public exploit EPSS 89%

    An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a rem…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 13, 2024
  • High 8.2
    CVE-2024-21893 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Polic…

    ivanti IPS ICS Network devices
    KEV Jan 31, 2024
  • High 8.2
    CVE-2023-46805 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a r…

    ivanti ICS IPS Network devices
    KEV Jan 10, 2024
  • High 7.2
    CVE-2023-35081 Exploited EPSS 64%

    A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) a…

    ivanti EPMM Network devices
    KEV Jul 31, 2023