Vendor
ivanti
413 known vulnerabilities.
Products
Avalanche 92
Endpoint Manager 73
Connect Secure 65
Policy Secure 52
EPM 33
Endpoint Manager Mobile 25
Secure Access Client 15
ZTA Gateway 15
Neurons for Secure Access 13
EPMM 11
Workspace Control 10
Sentry 10
Xtraction 8
CSA (Cloud Services Appliance) 6
Cloud Services Application 6
Neurons for ITSM 5
ICS 5
IPS 5
ITSM 5
Wavelink 4
Neurons for ZTA gateways 3
DSM 3
Ivanti Neurons for ITSM 3
Neurons for ITSM (Cloud) 3
MobileIron Core 2
Ivanti Endpoint Manager 2
Neurons for ITSM (On-Premise) 2
Secure Access Client Windows 2
Desktop and Server Management 2
Secure Access Linux 2
Security Controls 2
Neurons for Secure 2
Automation 2
Docs@Work 1
LANDesk Management Suite 1
Connect Secure 22.7R2.9 1
Patch SDK 1
Patch for Configuration Manager 1
Neurons for Patch Management 1
Neurons Agent Platform 1
92 results · Clear filters · Feed
-
Medium 5.3
An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain condit…
-
Medium 5.3
An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy S…
-
Medium 6.5
An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Req…
-
Medium 5.3
A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings.…
-
Medium 6.8CVE-2023-32562 EPSS 46%
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that coul…
-
Medium 6.8CVE-2023-32564 EPSS 44%
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that coul…
-
Medium 6.3
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resourc…
-
Medium 6.3
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resourc…
-
Medium 6.5
Ivanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.236
-
Medium 6.5CVE-2022-36982 EPSS 74%
This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.…
-
Medium 6.5
Ivanti MobileIron Core clish Restricted Shell Escape via Argument Injection
By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.
-
Medium 6.5
Ivanti MobileIron Core clish Restricted Shell Escape via OS Command Injection
By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.