HackZoneLabs News
Newsletter

Ivanti

38 vulnerabilities in Ivanti products that CISA lists as exploited.

CVEVendorProductNameAddedFix dueRansomware
CVE-2026-111357IvantiConnect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability30 Oct 20262 Nov 2026Unknown
CVE-2026-118527IvantiConnect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability30 Oct 202613 Nov 2026Unknown
CVE-2026-104935IvantiConnect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability13 Oct 202616 Oct 2026Unknown
CVE-2026-10520IvantiSentryIvanti Sentry OS Command Injection Vulnerability11 Jun 202614 Jun 2026Unknown
CVE-2026-6973IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability7 May 202610 May 2026Unknown
CVE-2026-1340IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability8 Apr 202611 Apr 2026Unknown
CVE-2026-1603IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability9 Mar 202623 Mar 2026Unknown
CVE-2026-1281IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability29 Jan 20261 Feb 2026Unknown
CVE-2025-4427IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability19 May 20259 Jun 2025Unknown
CVE-2025-4428IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability19 May 20259 Jun 2025Unknown
CVE-2025-22457IvantiConnect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability4 Apr 202511 Apr 2025Known
CVE-2024-13159IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability10 Mar 202531 Mar 2025Unknown
CVE-2024-13160IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability10 Mar 202531 Mar 2025Unknown
CVE-2024-13161IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability10 Mar 202531 Mar 2025Unknown
CVE-2025-0282IvantiConnect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability8 Jan 202515 Jan 2025Known
CVE-2024-9379IvantiCloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability9 Oct 202430 Oct 2024Unknown
CVE-2024-9380IvantiCloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability9 Oct 202430 Oct 2024Unknown
CVE-2024-29824IvantiEndpoint Manager (EPM)Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability2 Oct 202423 Oct 2024Unknown
CVE-2024-7593IvantiVirtual Traffic ManagerIvanti Virtual Traffic Manager Authentication Bypass Vulnerability24 Sep 202415 Oct 2024Unknown
CVE-2024-8963IvantiCloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability19 Sep 202410 Oct 2024Unknown
CVE-2024-8190IvantiCloud Services ApplianceIvanti Cloud Services Appliance OS Command Injection Vulnerability13 Sep 20244 Oct 2024Unknown
CVE-2021-44529IvantiEndpoint Manager Cloud Service Appliance (EPM CSA)Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability25 Mar 202415 Apr 2024Known
CVE-2024-21893IvantiConnect Secure, Policy Secure, and NeuronsIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability31 Jan 20242 Feb 2024Known
CVE-2023-35082IvantiEndpoint Manager Mobile (EPMM) and MobileIron CoreIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability18 Jan 20248 Feb 2024Known
CVE-2023-46805IvantiConnect Secure and Policy SecureIvanti Connect Secure and Policy Secure Authentication Bypass Vulnerability10 Jan 202422 Jan 2024Known
CVE-2024-21887IvantiConnect Secure and Policy SecureIvanti Connect Secure and Policy Secure Command Injection Vulnerability10 Jan 202422 Jan 2024Known
CVE-2023-38035IvantiSentryIvanti Sentry Authentication Bypass Vulnerability22 Aug 202312 Sep 2023Known
CVE-2023-35081IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability31 Jul 202321 Aug 2023Unknown
CVE-2023-35078IvantiEndpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability25 Jul 202315 Aug 2023Known
CVE-2019-11510IvantiPulse Connect SecureIvanti Pulse Connect Secure Arbitrary File Read Vulnerability3 Nov 20213 May 2022Known
CVE-2019-11539IvantiPulse Connect Secure and Pulse Policy SecureIvanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability3 Nov 20213 May 2022Known
CVE-2020-15505IvantiMobileIron Multiple ProductsIvanti MobileIron Multiple Products Remote Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2020-8243IvantiPulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2020-8260IvantiPulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2021-22893IvantiPulse Connect SecureIvanti Pulse Connect Secure Use-After-Free Vulnerability3 Nov 20213 May 2022Known
CVE-2021-22894IvantiPulse Connect SecureIvanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability3 Nov 20213 May 2022Unknown
CVE-2021-22899IvantiPulse Connect SecureIvanti Pulse Connect Secure Command Injection Vulnerability3 Nov 20213 May 2022Unknown
CVE-2021-22900IvantiPulse Connect SecureIvanti Pulse Connect Secure Unrestricted File Upload Vulnerability3 Nov 20213 May 2022Unknown