Total 490 security vulnerabilities recorded for ivanti software and firmware.
An Authentication Bypass vulnerability (CWE-288)Ā in IvantiĀ Sentry before theĀ R10.5.2, R10.6.2 and R10.7.1Ā versionsĀ allowsĀ a remote unauthenticated att...
An OS Command Injection vulnerabilityĀ in IvantiĀ Sentry beforeĀ theĀ R10.5.2, R10.6.2 and R10.7.1Ā versionsĀ allowsĀ a remote unauthenticated user to achiev...
An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbi...
SQL injection in the web consoleĀ of Ivanti Endpoint ManagerĀ before version 2024 SU6 allows a remote authenticated attacker to achieve remote code exec...
Incorrect permissions assignment inĀ the agent ofĀ Ivanti Endpoint Manager beforeĀ version 2024Ā SU6Ā allows aĀ localĀ authenticatedĀ attacker toĀ escalate the...
An exposed dangerous methodĀ onĀ the Core Server ofĀ Ivanti Endpoint ManagerĀ beforeĀ versionĀ 2024 SU6Ā allows aĀ remote authenticatedĀ attacker toĀ leak acces...
OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve r...
External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arb...
A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM...
An incorrect permission assignment for critical resource of Ivanti Secure Access ClientĀ Ā before 22.8R6 allows a local authenticated user to read or m...
Improper certificate validation in Ivanti EPMM beforeĀ versions 12.6.1.1, 12.7.0.1, and 12.8.0.1Ā allows a remote unauthenticated attackerĀ to enroll a d...
An Improper Input Validation in Ivanti EPMMĀ beforeĀ versions 12.6.1.1, 12.7.0.1, and 12.8.0.1Ā allowsĀ a remotely authenticated user withĀ administrative ...
An Improper Access Control in Ivanti EPMM beforeĀ versions 12.6.1.1, 12.7.0.1, and 12.8.0.1Ā allows a remote unauthenticated attacker to invoke arbitrar...
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to imperso...
An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gai...
An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges....
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credentia...
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database....
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution....
A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution....
Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a ...
Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outside of the...
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote, unauthenticated attac...
Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary JavaScript in the co...