Skip to contentIvanti vulnerabilities
Newest
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker...CVE-2024-13180EPSS 27.2%7.5 High
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker...CVE-2024-13179EPSS 63.8%7.3 High
- ivanti application control engine, application control, security controls +2 moreA race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local...CVE-2024-106307.8 High
- ivanti connect secure, neurons for zta gateways, policy secure +1 more +3 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy...CVE-2025-0283EPSS 17.5%7.0 High
- ivanti connect secure, neurons for zta gateways, policy secure +2 more +4 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy...CVE-2025-0282In KEVPublic exploitEPSS 100.0%9.0 Critical
- ivanti connect secure, policy secure +1 moreAn out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote...CVE-2024-374017.5 High
- ivanti connect secure, policy secure +1 moreA heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a...CVE-2024-373777.5 High
- ivanti application controlUnder specific circumstances, insecure permissions in Ivanti Application Control before version...CVE-2024-115987.8 High
- ivanti performance managerUnder specific circumstances, insecure permissions in Ivanti Performance Manager before version...CVE-2024-115977.8 High
- ivanti workspace controlUnder specific circumstances, insecure permissions in Ivanti Workspace Control before version 10...CVE-2024-84967.8 High
- ivanti automationUnder specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1...CVE-2024-98457.8 High
- ivanti security controlsUnder specific circumstances, insecure permissions in Ivanti Security Controls before version...CVE-2024-102517.8 High
- ivanti cloud services application, cloud services appliance +1 moreSQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote...CVE-2024-11773EPSS 23.3%9.1 Critical
- ivanti cloud services application, cloud services appliance +1 moreCommand injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote...CVE-2024-117729.1 Critical
- ivanti cloud services application, cloud services appliance +1 moreAn authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote...CVE-2024-1163910.0 Critical
- ivanti desktop and server management, desktop \& server management +1 moreInsufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated...CVE-2024-75727.1 High
- ivanti sentry, standalone sentry +1 moreInsecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local...CVE-2024-85408.8 High
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure...CVE-2024-116349.1 Critical
- ivanti connect secureArgument injection in Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated...CVE-2024-116339.1 Critical
- ivanti connect secureInsufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before...CVE-2024-98447.1 High
- ivanti patch sdk, endpoint manager, neurons agent platform +4 more +6 moreInsufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated...CVE-2024-102567.1 High
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti...CVE-2024-397129.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti...CVE-2024-397119.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2 and 9.1R18.7 and Ivanti Policy...CVE-2024-397109.1 Critical
- ivanti connect secure, policy secure +1 moreIncorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy...CVE-2024-397097.8 High
- ivanti connect secure, policy secure, automation +2 moreArgument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti...CVE-2024-386569.1 Critical
- ivanti connect secure, policy secure +1 moreArgument injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-386559.1 Critical
- ivanti secure access clientImproper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local...CVE-2024-386544.4 Medium
- ivanti connect secureAn out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote...CVE-2024-386497.5 High
- ivanti connect secureAn out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote...CVE-2024-374007.5 High
- ivanti secure access clientInsufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated...CVE-2024-373987.8 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-373767.2 High
- ivanti endpoint manager, epm +1 morePath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-34787EPSS 17.8%7.8 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-347847.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-347827.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-34781EPSS 68.5%7.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-347807.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-328477.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-328447.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-328417.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-328397.2 High
- ivanti secure access clientA race condition in Ivanti Secure Access Client before version 22.7R4 allows a local...CVE-2024-292117.1 High
- ivanti secure access clientIncorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated...CVE-2024-75717.8 High
- ivanti secure access clientA buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated...CVE-2024-98435.0 Medium
- ivanti secure access clientIncorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local...CVE-2024-98427.3 High
- ivanti secure access clientImproper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local...CVE-2024-85397.1 High
- ivanti connect secure, policy secure +1 moreReflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before...CVE-2024-110046.1 Medium
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-110059.1 Critical
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-110069.1 Critical
- ivanti connect secure, policy secure +1 moreCommand injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure...CVE-2024-110079.1 Critical
- Show moreLoading…