Skip to contentIvanti vulnerabilities
Newest
- ivanti connect secure, policy secure +1 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy...CVE-2025-54514.9 Medium
- ivanti connect secure, policy secure +1 moreImproper access control in the certificate management component of Ivanti Connect Secure before...CVE-2025-54506.3 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint ManagerCVE-2025-70377.2 High
- ivanti endpoint managerImproper Encryption in Ivanti Endpoint ManagerCVE-2025-69968.4 High
- ivanti endpoint managerImproper Encryption in Ivanti Endpoint ManagerCVE-2025-69958.4 High
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local...CVE-2025-53538.8 High
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local...CVE-2025-224637.3 High
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated...CVE-2025-224558.8 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreRemote Code ExecutionCVE-2025-4428In KEVPublic exploitEPSS 88.0%7.2 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreAuthentication BypassCVE-2025-4427In KEVPublic exploitEPSS 99.9%5.3 Medium
- ivanti neurons for itsm, neurons for itsm (on-prem) +1 moreAn authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024...CVE-2025-224629.8 Critical
- ivanti cloud services appliance, csa (cloud services appliance) +1 moreDefault credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local...CVE-2025-224607.8 High
- haloitsm itsmHaloITSM open redirect via the returnUrlCVE-2025-408467.1 High
- ivanti landesk management suiteA directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9....CVE-2025-437165.8 Medium
- ivanti endpoint managerReflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...CVE-2025-224668.2 High
- ivanti endpoint managerReflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...CVE-2025-224656.1 Medium
- ivanti endpoint managerAn untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1...CVE-2025-224646.1 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...CVE-2025-224617.2 High
- ivanti endpoint managerImproper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before...CVE-2025-224594.8 Medium
- ivanti endpoint managerDLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...CVE-2025-224587.8 High
- ivanti connect secure, policy secure, connect secure, policy secure, and zta gateways +2 more +4 moreA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy...CVE-2025-22457In KEVPublic exploitEPSS 100.0%9.0 Critical
- ivanti secure access clientInsufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a...CVE-2025-224547.8 High
- esafenet dsmESAFENET DSM examExportPDF command injectionCVE-2025-18455.3 Medium
- ivanti connect secure, policy secure +1 moreExternal control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti...CVE-2024-386579.1 Critical
- ivanti secure access clientInsufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local...CVE-2024-138137.1 High
- ivanti connect secure, policy secure +1 moreCleartext storage of information in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...CVE-2024-138436.0 Medium
- ivanti connect secure, policy secure +1 moreA hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before...CVE-2024-138426.0 Medium
- ivanti connect secure, policy secure +1 moreReflected XSS in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before...CVE-2024-138306.1 Medium
- ivanti connect secure, policy secure +1 moreExternal control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti...CVE-2024-120586.8 Medium
- ivanti connect secure, policy secure +1 moreCode injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before...CVE-2024-106449.1 Critical
- ivanti connect secureA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6 allows a remote...CVE-2025-224679.9 Critical
- ivanti cloud services application, cloud services appliance +1 morePath traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to...CVE-2024-117715.3 Medium
- ivanti cloud services application, cloud services appliance +1 moreOS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote...CVE-2024-47908EPSS 22.3%9.1 Critical
- ivanti endpoint managerSQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January...CVE-2024-13162EPSS 65.0%7.2 High
- ivanti endpoint managerDeserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131637.8 High
- ivanti endpoint managerAn uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131647.8 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131657.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131667.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131677.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131687.5 High
- ivanti endpoint managerAn out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131697.8 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131707.5 High
- ivanti endpoint managerInsufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-13171EPSS 17.5%7.8 High
- ivanti endpoint managerImproper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131727.8 High
- ivanti endpoint managerAn unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131587.2 High
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13159In KEVPublic exploitEPSS 100.0%9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13160In KEVEPSS 91.0%9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13161In KEVEPSS 89.8%9.8 Critical
- ivanti endpoint managerAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-108119.8 Critical
- ivanti avalanchePath Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker...CVE-2024-13181EPSS 33.2%7.3 High
- Show moreLoading…