Skip to contentIvanti vulnerabilities
Newest
- ivanti connect secure, policy secure +1 moreA null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy...CVE-2024-84957.5 High
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy...CVE-2024-479094.9 Medium
- ivanti connect secureA stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a...CVE-2024-479077.5 High
- ivanti connect secure, policy secure +1 moreExcessive binary privileges in Ivanti Connect Secure which affects versions 22.4R2 through 22.7R2...CVE-2024-479067.8 High
- ivanti connect secure, policy secure +1 moreA use-after-free in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before...CVE-2024-94208.8 High
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy...CVE-2024-479054.9 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50330Public exploitEPSS 40.3%9.8 Critical
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503298.8 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503287.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503277.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50326EPSS 26.5%7.2 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50324EPSS 18.7%7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503237.8 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503227.8 High
- ivanti avalancheAn out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote...CVE-2024-503317.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...CVE-2024-503217.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...CVE-2024-50320EPSS 39.6%7.5 High
- ivanti avalancheAn infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to...CVE-2024-503197.5 High
- ivanti avalancheA null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated...CVE-2024-503187.5 High
- ivanti avalancheA null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated...CVE-2024-503177.5 High
- ivanti connect secure, policy secure +1 moreImproper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18...CVE-2024-37404Public exploitEPSS 71.0%9.1 Critical
- ivanti dsm, desktop \& server management +1 moreIvanti DSM < version 2024.2 allows authenticated users on the local machine to run code with...CVE-2024-298217.8 High
- ivanti dsm, desktop \& server management +1 moreIvanti DSM < version 2024.2 allows authenticated users on the local machine to run code with...CVE-2024-292137.8 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...CVE-2024-47011EPSS 56.3%7.5 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...CVE-2024-47010EPSS 37.8%7.3 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker...CVE-2024-470097.3 High
- ivanti avalancheServer-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote...CVE-2024-47008EPSS 47.1%7.5 High
- ivanti avalancheA NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5...CVE-2024-470077.5 High
- ivanti velocity license serverUnder specific circumstances, insecure permissions in Ivanti Velocity License Server before...CVE-2024-91677.8 High
- ivanti csa (cloud services appliance), endpoint manager cloud services appliance +1 morePath traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with...CVE-2024-9381EPSS 15.6%7.2 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 moreAn OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2...CVE-2024-9380In KEVEPSS 58.3%7.2 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 moreSQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote...CVE-2024-9379In KEVEPSS 44.3%6.5 Medium
- ivanti endpoint manager mobileInsecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to...CVE-2024-76128.8 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 morePath Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to...CVE-2024-8963In KEVPublic exploitEPSS 98.6%9.4 Critical
- ivanti epm, endpoint manager +1 moreAn External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before...CVE-2024-37397EPSS 59.3%8.2 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-34785EPSS 25.4%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-34783EPSS 43.4%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-34779EPSS 24.0%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-32848EPSS 43.4%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-328469.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-32845EPSS 24.0%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-328439.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-328429.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-32840EPSS 25.4%9.1 Critical
- ivanti epm, endpoint manager +1 moreDeserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024...CVE-2024-29847Public exploitEPSS 52.1%10.0 Critical
- ivanti endpoint managerAn uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-84416.7 Medium
- ivanti endpoint managerWeak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83224.3 Medium
- ivanti endpoint managerMissing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83215.8 Medium
- ivanti automation, endpoint manager +1 moreMissing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83205.3 Medium
- ivanti endpoint managerSQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-8191EPSS 20.3%7.8 High
- Show moreLoading…