Ivanti: known exploited vulnerabilities
36Catalog entries
12Ransomware use
2026-10-13Last added
2026-10-16Latest due date
Get an email when Ivanti is next added.Watch Ivanti
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2026-104935 | Connect Secure Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability |
2026-10-16 |
| CVE-2026-10520 | Sentry Ivanti Sentry OS Command Injection Vulnerability |
2026-06-14 |
| CVE-2026-6973 | Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability |
2026-05-10 |
| CVE-2026-1340 | Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
2026-04-11 |
| CVE-2026-1603 | Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability |
2026-03-23 |
| CVE-2026-1281 | Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
2026-02-01 |
| CVE-2025-4427 | Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability |
2025-06-09 |
| CVE-2025-4428 | Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability |
2025-06-09 |
| CVE-2025-22457 | Connect Secure, Policy Secure, and ZTA Gateways RANSOMWARE Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability |
2025-04-11 |
| CVE-2024-13159 | Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
2025-03-31 |
| CVE-2024-13160 | Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
2025-03-31 |
| CVE-2024-13161 | Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability |
2025-03-31 |
| CVE-2025-0282 | Connect Secure, Policy Secure, and ZTA Gateways RANSOMWARE Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability |
2025-01-15 |
| CVE-2024-9379 | Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability |
2024-10-30 |
| CVE-2024-9380 | Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability |
2024-10-30 |
| CVE-2024-29824 | Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability |
2024-10-23 |
| CVE-2024-7593 | Virtual Traffic Manager Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability |
2024-10-15 |
| CVE-2024-8963 | Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability |
2024-10-10 |
| CVE-2024-8190 | Cloud Services Appliance Ivanti Cloud Services Appliance OS Command Injection Vulnerability |
2024-10-04 |
| CVE-2021-44529 | Endpoint Manager Cloud Service Appliance (EPM CSA) RANSOMWARE Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability |
2024-04-15 |
| CVE-2024-21893 | Connect Secure, Policy Secure, and Neurons RANSOMWARE Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability |
2024-02-02 |
| CVE-2023-35082 | Endpoint Manager Mobile (EPMM) and MobileIron Core RANSOMWARE Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability |
2024-02-08 |
| CVE-2024-21887 | Connect Secure and Policy Secure RANSOMWARE Ivanti Connect Secure and Policy Secure Command Injection Vulnerability |
2024-01-22 |
| CVE-2023-46805 | Connect Secure and Policy Secure RANSOMWARE Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability |
2024-01-22 |
| CVE-2023-38035 | Sentry RANSOMWARE Ivanti Sentry Authentication Bypass Vulnerability |
2023-09-12 |
| CVE-2023-35081 | Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability |
2023-08-21 |
| CVE-2023-35078 | Endpoint Manager Mobile (EPMM) RANSOMWARE Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability |
2023-08-15 |
| CVE-2019-11539 | Pulse Connect Secure and Pulse Policy Secure RANSOMWARE Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability |
2022-05-03 |
| CVE-2019-11510 | Pulse Connect Secure RANSOMWARE Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability |
2022-05-03 |
| CVE-2021-22899 | Pulse Connect Secure Ivanti Pulse Connect Secure Command Injection Vulnerability |
2022-05-03 |
| CVE-2020-8260 | Pulse Connect Secure Ivanti Pulse Connect Secure Code Execution Vulnerability |
2022-05-03 |
| CVE-2021-22894 | Pulse Connect Secure Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability |
2022-05-03 |
| CVE-2021-22900 | Pulse Connect Secure Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability |
2022-05-03 |
| CVE-2020-8243 | Pulse Connect Secure Ivanti Pulse Connect Secure Code Execution Vulnerability |
2022-05-03 |
| CVE-2021-22893 | Pulse Connect Secure RANSOMWARE Ivanti Pulse Connect Secure Use-After-Free Vulnerability |
2022-05-03 |
| CVE-2020-15505 | MobileIron Multiple Products Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability |
2022-05-03 |