Ivanti
Ivanti known exploited vulnerabilities
Every Ivanti vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 12 of them are known to be used by ransomware.
35 CVEs
- CVE-2026-10520Ivanti Sentry OS Command Injection Vulnerability · added June 11, 2026
- CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability · added May 7, 2026
- CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability · added April 8, 2026
- CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability · added March 9, 2026
- CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability · added January 29, 2026
- CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability · added May 19, 2025
- CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability · added May 19, 2025
- CVE-2025-22457 ransomwareIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability · added April 4, 2025
- CVE-2024-13161Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability · added March 10, 2025
- CVE-2024-13160Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability · added March 10, 2025
- CVE-2024-13159Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability · added March 10, 2025
- CVE-2025-0282 ransomwareIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability · added January 8, 2025
- CVE-2024-9380Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability · added October 9, 2024
- CVE-2024-9379Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability · added October 9, 2024
- CVE-2024-29824Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability · added October 2, 2024
- CVE-2024-7593Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability · added September 24, 2024
- CVE-2024-8963Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability · added September 19, 2024
- CVE-2024-8190Ivanti Cloud Services Appliance OS Command Injection Vulnerability · added September 13, 2024
- CVE-2021-44529 ransomwareIvanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability · added March 25, 2024
- CVE-2024-21893 ransomwareIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability · added January 31, 2024
- CVE-2023-35082 ransomwareIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability · added January 18, 2024
- CVE-2024-21887 ransomwareIvanti Connect Secure and Policy Secure Command Injection Vulnerability · added January 10, 2024
- CVE-2023-46805 ransomwareIvanti Connect Secure and Policy Secure Authentication Bypass Vulnerability · added January 10, 2024
- CVE-2023-38035 ransomwareIvanti Sentry Authentication Bypass Vulnerability · added August 22, 2023
- CVE-2023-35081Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability · added July 31, 2023
- CVE-2023-35078 ransomwareIvanti Endpoint Manager Mobile Authentication Bypass Vulnerability · added July 25, 2023
- CVE-2021-22900Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability · added November 3, 2021
- CVE-2021-22899Ivanti Pulse Connect Secure Command Injection Vulnerability · added November 3, 2021
- CVE-2021-22894Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability · added November 3, 2021
- CVE-2021-22893 ransomwareIvanti Pulse Connect Secure Use-After-Free Vulnerability · added November 3, 2021
- CVE-2020-15505Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability · added November 3, 2021
- CVE-2020-8260Ivanti Pulse Connect Secure Code Execution Vulnerability · added November 3, 2021
- CVE-2020-8243Ivanti Pulse Connect Secure Code Execution Vulnerability · added November 3, 2021
- CVE-2019-11539 ransomwareIvanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability · added November 3, 2021
- CVE-2019-11510 ransomwareIvanti Pulse Connect Secure Arbitrary File Read Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).