Skip to contentIvanti vulnerabilities
Newest
- ivanti avalancheAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46220EPSS 11.3%9.8 Critical
- ivanti avalanche, wavelink +1 moreAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46217EPSS 36.4%9.8 Critical
- ivanti avalanche, wavelink +1 moreAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-46216EPSS 36.4%9.8 Critical
- ivanti avalanche, wavelink +1 moreAn attacker sending specially crafted data packets to the Mobile Device Server can cause memory...CVE-2023-41727EPSS 36.4%9.8 Critical
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...CVE-2021-22962EPSS 91.0%7.3 High
- ivanti connect secureA vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker...CVE-2023-393407.5 High
- ivanti connect secureA vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker...CVE-2023-417207.0 High
- ivanti connect secureA vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker...CVE-2023-417197.2 High
- absolute software secure access, ivanti secure access client +1 moreWhen a particular process flow is initiated, an attacker may be able to gain unauthorized...CVE-2023-417187.8 High
- ivanti epmm, endpoint manager mobile +1 moreA security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with...CVE-2023-393379.1 Critical
- ivanti epmm, endpoint manager mobile +1 moreA security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older...CVE-2023-393359.8 Critical
- ivanti secure access linux, secure access client +1 moreA logged in user can modify specific files that may lead to unauthorized changes in system-wide...CVE-2023-385445.3 Medium
- ivanti secure access client, secure access client windows +1 moreWhen a specific component is loaded a local attacker and is able to send a specially crafted...CVE-2023-385438.8 High
- ivanti secure access client, secure access client windows +1 moreWhen a specific component is loaded a local attacker and is able to send a specially crafted...CVE-2023-380438.8 High
- ivanti secure access clientA vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow...CVE-2023-35080Public exploit8.8 High
- ivanti avalancheIvanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation VulnerabilityCVE-2023-417267.8 High
- ivanti avalancheIvanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation...CVE-2023-417257.8 High
- ivanti automationA locally authenticated attacker with low privileges can bypass authentication due to insecure...CVE-2022-44569Public exploit8.8 High
- ivanti avalancheIvanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation...CVE-2022-435557.8 High
- ivanti avalancheIvanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation...CVE-2022-435547.8 High
- ivanti secure access clientA logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU)...CVE-2023-38041Public exploit7.8 High
- ivanti endpoint managerAllows an authenticated attacker with network access to read arbitrary files on Endpoint Manager...CVE-2023-350836.5 Medium
- ivanti endpoint managerUnsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti...CVE-2023-350849.8 Critical
- ivanti endpoint managerAn issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure...CVE-2023-383446.5 Medium
- ivanti endpoint managerAn XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti...CVE-2023-383437.5 High
- ivanti mobileiron sentry, sentry +1 moreA security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and...CVE-2023-38035In KEVPublic exploitEPSS 100.0%9.8 Critical
- ivanti epmm, endpoint manager mobile (epmm) and mobileiron core, endpoint manager mobile +2 moreAn authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users...CVE-2023-35082In KEVPublic exploitEPSS 100.0%10.0 Critical
- ivanti desktop & server management (dsm), desktop \& server management +1 moreDesktop & Server Management (DSM) may have a possible execution of arbitrary commands.CVE-2023-281297.8 High
- ivanti avalancheAn attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could...CVE-2023-32560Public exploitEPSS 99.4%8.8 High
- ivanti avalancheA previously generated artifact by an administrator could be accessed by an attacker. The...CVE-2023-325617.1 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3...CVE-2023-32562EPSS 45.6%6.8 Medium
- ivanti avalancheAn unauthenticated attacker could achieve the code execution through a RemoteControl server.CVE-2023-32563EPSS 89.1%8.8 High
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4...CVE-2023-32564EPSS 44.4%6.8 Medium
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...CVE-2023-325656.3 Medium
- ivanti avalancheAn attacker can send a specially crafted request which could lead to leakage of sensitive data or...CVE-2023-325666.3 Medium
- ivanti avalanche, wavelink +1 moreIvanti Avalanche decodeToMap XML External Entity Processing. Fixed in version 6.4.1.CVE-2023-325676.5 Medium
- ivanti epmm, endpoint manager mobile (epmm), endpoint manager mobile +2 moreA path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2...CVE-2023-35081In KEVEPSS 63.6%7.2 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreIvanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote...CVE-2023-35078In KEVPublic exploitEPSS 100.0%10.0 Critical
- ivanti endpoint managerAn out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus...CVE-2023-350778.1 High
- ivanti endpoint managerA deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an...CVE-2023-283239.8 Critical
- ivanti endpoint managerA improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that...CVE-2023-28324Public exploitEPSS 12.9%9.8 Critical
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3...CVE-2023-28128Public exploitEPSS 84.0%7.2 High
- ivanti avalancheA path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited...CVE-2023-28127EPSS 58.6%7.5 High
- ivanti avalancheAn authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could...CVE-2023-28126EPSS 66.7%5.9 Medium
- ivanti avalancheAn improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below...CVE-2023-281255.9 Medium
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-369837.5 High
- ivanti avalancheThis vulnerability allows remote attackers to read arbitrary files on affected installations of...CVE-2022-36982EPSS 75.1%6.5 Medium
- ivanti avalancheThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2022-36981EPSS 84.3%8.8 High
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-36980EPSS 82.6%9.4 Critical
- ivanti avalancheThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-369797.5 High
- Show moreLoading…