← Back

Ivanti

ivanti

494 CVEs • 41 products

Products (41)

Click to collapse
Toggle
Connect Secure
connect_secure
130 CVEs
Avalanche
avalanche
117 CVEs
Endpoint Manager
endpoint_manager
116 CVEs
Policy Secure
policy_secure
77 CVEs
Endpoint Manager Mobile
endpoint_manager_mobile
28 CVEs
Workspace Control
workspace_control
22 CVEs
Secure Access Client
secure_access_client
21 CVEs
Zero Trust Access Gateway
zero_trust_access_gateway
17 CVEs
Neurons For Secure Access
neurons_for_secure_access
15 CVEs
Cloud Services Appliance
cloud_services_appliance
7 CVEs
Landesk Management Suite
landesk_management_suite
6 CVEs
Desktop & Server Management
desktop_&_server_management
6 CVEs
Neurons For Itsm
neurons_for_itsm
6 CVEs
Endpoint Manager Cloud Services Appliance
endpoint_manager_cloud_services_appliance
5 CVEs
Neurons For Zero Trust Access
neurons_for_zero-trust_access
5 CVEs
Standalone Sentry
standalone_sentry
4 CVEs
Incapptic Connect
incapptic_connect
3 CVEs
Security Controls
security_controls
3 CVEs
Xtraction
xtraction
3 CVEs
Mobileiron
mobileiron
2 CVEs
Automation
automation
2 CVEs
Application Control
application_control
2 CVEs
Virtual Traffic Manager
virtual_traffic_manager
2 CVEs
Endpoint Security
endpoint_security
1 CVE
Desktop&server Management
desktop&server_management
1 CVE
Service Manager Heat Remote Control
service_manager_heat_remote_control
1 CVE
Dsm Netinst
dsm_netinst
1 CVE
Service Manager
service_manager
1 CVE
Dsm Remote
dsm_remote
1 CVE
Mobileiron Sentry
mobileiron_sentry
1 CVE
Pulse Secure Desktop Client
pulse_secure_desktop_client
1 CVE
Pulse Secure Installer Service
pulse_secure_installer_service
1 CVE
Docs@work
docs@work
1 CVE
Virtual Traffic Management
virtual_traffic_management
1 CVE
Velocity License Server
velocity_license_server
1 CVE
Neurons Agent Platform
neurons_agent_platform
1 CVE
Neurons For Patch Management
neurons_for_patch_management
1 CVE
Patch For Configuration Manager
patch_for_configuration_manager
1 CVE
Patch Software Development Kit
patch_software_development_kit
1 CVE
Performance Manager
performance_manager
1 CVE
Virtual Application Delivery Controller
virtual_application_delivery_controller
1 CVE

CVEs (494)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-12058
1Ivanti
2Connect Secure
Policy Secure
Jun 17, 2026
Feb 11, 2025
N/A· v4
4.9 MEDIUM· v3
N/A· v2
External control of a file name in Ivanti Connect Secure before version 22.7R2.6 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to read arbitrary files.
CVE-2024-11771
1Ivanti
1Cloud Services Appliance
Jun 17, 2026
Feb 11, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.
CVE-2024-10644
1Ivanti
2Connect Secure
Policy Secure
Jun 17, 2026
Feb 11, 2025
N/A· v4
7.2 HIGH· v3
N/A· v2
Code injection in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
CVE-2024-13172
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user i...Show more
Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.Show less
CVE-2024-13171
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user...Show more
Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.Show less
CVE-2024-13170
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.
CVE-2024-13169
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.
CVE-2024-13168
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.
CVE-2024-13167
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.
CVE-2024-13166
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.
CVE-2024-13165
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.
CVE-2024-13164
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.
CVE-2024-13163
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user...Show more
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.Show less
CVE-2024-13162
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.2 HIGH· v3
N/A· v2
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE a...Show more
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848.Show less
CVE-2024-13161
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
CVE-2024-13160
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
CVE-2024-13159
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
CVE-2024-13158
1Ivanti
1Endpoint Manager
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.2 HIGH· v3
N/A· v2
An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code e...Show more
An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.Show less
CVE-2024-13181
1Ivanti
1Avalanche
Jun 17, 2026
Jan 14, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.
CVE-2024-13180
1Ivanti
1Avalanche
Jun 17, 2026
Jan 14, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011.