Skip to contentIvanti vulnerabilities
Newest
- ivanti endpoint managerImproper control of dynamically managed code resources in Ivanti Endpoint Manager prior to...CVE-2025-136598.8 High
- ivanti endpoint managerStored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote...CVE-2025-10573EPSS 34.1%9.6 Critical
- ivanti endpoint managerInsecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4...CVE-2025-109187.1 High
- ivanti endpoint manager mobilePath traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4...CVE-2025-109864.7 Medium
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...CVE-2025-10985EPSS 21.3%7.2 High
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...CVE-2025-10243EPSS 21.3%7.2 High
- ivanti endpoint manager mobileOS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12...CVE-2025-10242EPSS 21.3%7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623846.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623866.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623836.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623916.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623856.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623876.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623886.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623896.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623906.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-623926.5 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary...CVE-2025-116236.5 Medium
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager allows a remote unauthenticated attacker to achieve...CVE-2025-9713EPSS 16.1%8.8 High
- ivanti endpoint managerInsecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to...CVE-2025-116227.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551445.4 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreReflected text injection in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551436.1 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551428.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551418.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreSSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-551396.8 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551487.6 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreCSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-551478.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreAn unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy...CVE-2025-551464.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +3 more +5 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-551458.9 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreCSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6,...CVE-2025-87115.4 Medium
- ivanti connect secure before, connect secure, neurons for secure access +3 more +5 moreMissing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure...CVE-2025-87125.4 Medium
- ivanti endpoint managerInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 Security Update 1 and...CVE-2025-9872EPSS 17.0%8.8 High
- ivanti endpoint managerInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 Security Update 1 and...CVE-2025-9712EPSS 25.6%8.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreImproper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,...CVE-2025-54685.5 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreXEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5,...CVE-2025-54664.9 Medium
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy...CVE-2025-54627.5 High
- ivanti connect secure, neurons for secure, neurons for secure access +3 more +5 moreA buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti...CVE-2025-54567.5 High
- ivanti virtual application delivery controller, virtual application delivery controllercwe-862 +1 moreMissing authorization in the admin console of Ivanti Virtual Application Delivery Controller...CVE-2025-83106.5 Medium
- ivanti avalancheIncomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a...CVE-2025-82977.2 High
- ivanti avalancheSQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated...CVE-2025-82967.2 High
- ivanti policy secureA vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an...CVE-2023-393394.9 Medium
- ivanti dsm, desktop \& server management +1 moreA hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent...CVE-2024-386489.0 Critical
- ivanti sentryEnables an authenticated user (enrolled device) to access a service protected by Sentry even if...CVE-2023-393386.8 Medium
- ivanti avalancheA security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an...CVE-2023-380369.8 Critical
- ivanti endpoint manager mobileOS command injection in Ivanti Endpoint ManagerCVE-2025-6771EPSS 23.0%7.2 High
- ivanti connect secure, policy secure +1 moreSSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22...CVE-2025-02925.5 Medium
- ivanti connect secure, policy secure +1 moreCLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before...CVE-2025-02936.6 Medium
- ivanti connect secureInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2...CVE-2025-54646.5 Medium
- ivanti endpoint manager mobileOS command injection in Ivanti Endpoint ManagerCVE-2025-6770EPSS 19.5%7.2 High
- ivanti connect secure, policy secure +1 moreInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2...CVE-2025-54635.5 Medium
- Show moreLoading…