Skip to contentIvanti vulnerabilities
Newest
- ivanti workspace controlDLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below...CVE-2024-441078.8 High
- ivanti workspace control, automation +1 moreInsufficient server-side controls in the management console of Ivanti Workspace Control version...CVE-2024-441068.8 High
- ivanti workspace control, automation +1 moreCleartext transmission of sensitive information in the management console of Ivanti Workspace...CVE-2024-441058.2 High
- ivanti workspace control, automation +1 moreAn incorrectly implemented authentication scheme that is subjected to a spoofing attack in the...CVE-2024-441048.8 High
- ivanti workspace control, automation +1 moreDLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below...CVE-2024-441038.8 High
- ivanti workspace controlAn authentication bypass weakness in the message broker service of Ivanti Workspace Control...CVE-2024-80127.8 High
- ivanti cloud services appliance, csa (cloud services appliance), endpoint manager cloud services appliance +2 moreAn OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518...CVE-2024-8190In KEVPublic exploitEPSS 88.5%7.2 High
- ivanti avalancheXXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to...CVE-2024-38653EPSS 92.0%8.2 High
- ivanti avalanchePath traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote...CVE-2024-386528.2 High
- ivanti avalancheA NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote...CVE-2024-37399EPSS 27.8%7.5 High
- ivanti avalancheImproper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote...CVE-2024-373737.2 High
- ivanti avalancheAn off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote...CVE-2024-361367.5 High
- ivanti vtm, virtual traffic manager +1 moreIncorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1...CVE-2024-7593In KEVPublic exploitEPSS 100.0%9.8 Critical
- ivanti itsm, neurons for itsm +1 moreImproper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and...CVE-2024-75708.3 High
- ivanti itsm, neurons for itsm +1 moreAn information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023...CVE-2024-75699.6 Critical
- ivanti epmm, endpoint manager mobile +1 moreAn insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an...CVE-2024-361309.8 Critical
- ivanti docs@work, docs\@work +1 moreIvanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The...CVE-2024-374035.0 Medium
- ivanti epmm, endpoint manager mobile +1 moreInsufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote...CVE-2024-361328.2 High
- ivanti epmm, endpoint manager mobile +1 moreAn insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an...CVE-2024-361318.8 High
- ivanti epmm, endpoint manager mobile +1 moreAn improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a...CVE-2024-347885.3 Medium
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an...CVE-2024-373818.4 High
- ivanti avalancheAn unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x...CVE-2024-29848EPSS 64.4%7.2 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-298468.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-298308.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-298298.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-298288.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29827EPSS 71.7%9.6 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29826EPSS 99.9%9.6 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29825EPSS 99.9%9.6 Critical
- ivanti epm, endpoint manager (epm), endpoint manager +2 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29824In KEVPublic exploitEPSS 99.9%9.6 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29823EPSS 99.9%9.6 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29822EPSS 64.4%9.6 Critical
- ivanti itsm, neurons for itsm +1 moreAn unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a...CVE-2024-220608.7 High
- ivanti itsm, neurons for itsm +1 moreA SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote...CVE-2024-220598.8 High
- ivanti epm, endpoint manager +1 moreA buffer overflow allows a low privilege user on the local machine that has the EPM Agent...CVE-2024-220587.8 High
- ivanti secure access client, secure access linux +1 moreA local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1...CVE-2023-468107.3 High
- ivanti connect secureA CRLF Injection vulnerability in Ivanti Connect Secure (9.x, 22.x) allows an authenticated high...CVE-2023-385518.2 High
- ivanti secure access clientA local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a...CVE-2023-380427.8 High
- ivanti epmm, endpoint manager mobile +1 moreA local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local...CVE-2024-22026Public exploit6.7 Medium
- ivanti epmm, endpoint manager mobile +1 moreAn SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated...CVE-2023-468076.7 Medium
- ivanti epmm, endpoint manager mobile +1 moreAn SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an...CVE-2023-468066.7 Medium
- netskope client, ivanti pulse secure desktop client, pulse secure installer service +1 more +3 morePulse Secure Client SetupService Directory Traversal Local Privilege Escalation VulnerabilityCVE-2023-342987.8 High
- ivanti connect secure, policy secure +1 moreAn Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of...CVE-2024-292057.5 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235275.3 Medium
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235265.3 Medium
- ivanti avalancheA Heap Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3...CVE-2024-220618.1 High
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235295.3 Medium
- ivanti avalancheAn out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6...CVE-2024-235285.3 Medium
- ivanti avalancheA Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote...CVE-2024-250008.8 High
- ivanti avalancheA Heap Overflow vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3...CVE-2024-292049.8 Critical
- Show moreLoading…