Skip to content
OpenAdvisories

Vendor

ivanti

413 known vulnerabilities.

Products

Avalanche 92 Endpoint Manager 73 Connect Secure 65 Policy Secure 52 EPM 33 Endpoint Manager Mobile 25 Secure Access Client 15 ZTA Gateway 15 Neurons for Secure Access 13 EPMM 11 Workspace Control 10 Sentry 10 Xtraction 8 CSA (Cloud Services Appliance) 6 Cloud Services Application 6 Neurons for ITSM 5 ICS 5 IPS 5 ITSM 5 Wavelink 4 Neurons for ZTA gateways 3 DSM 3 Ivanti Neurons for ITSM 3 Neurons for ITSM (Cloud) 3 MobileIron Core 2 Ivanti Endpoint Manager 2 Neurons for ITSM (On-Premise) 2 Secure Access Client Windows 2 Desktop and Server Management 2 Secure Access Linux 2 Security Controls 2 Neurons for Secure 2 Automation 2 Docs@Work 1 LANDesk Management Suite 1 Connect Secure 22.7R2.9 1 Patch SDK 1 Patch for Configuration Manager 1 Neurons for Patch Management 1 Neurons Agent Platform 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.6
    CVE-2026-104935 Exploited Public exploit Scanner template EPSS 89%

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute ar…

    ivanti Connect Secure Network devices
    KEV Oct 13, 2026
  • High 7.2
    CVE-2025-4428 Exploited Public exploit EPSS 88%

    Remote Code Execution

    Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.

    ivanti Endpoint Manager Mobile Network devices
    KEV May 19, 2025
  • High 7.2
    CVE-2024-8190 Exploited Public exploit EPSS 89%

    An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a rem…

    ivanti CSA (Cloud Services Appliance) Network devices
    KEV Sep 13, 2024
  • High 8.2
    CVE-2024-21893 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Polic…

    ivanti IPS ICS Network devices
    KEV Jan 31, 2024
  • High 8.2
    CVE-2023-46805 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a r…

    ivanti IPS ICS Network devices
    KEV Jan 10, 2024