DE
DeutschEnglishEspañolFrançaisItaliano

Kostenlos testen Dashboard

Ausgenutzte Schwachstellen

Ivanti

38 Schwachstellen von Ivanti im KEV-Katalog der CISA: jene, für die die US-Behörde für Cybersicherheit Belege für eine Ausnutzung in echten Angriffen hat.

Im Katalog38
Letzte 12 Monate8
In Ransomware-Kampagnen12
Zuletzt aufgenommen30. Oktober 2026

Die Schwachstellen38

  1. 30. Oktober 2026CVE-2026-118527Connect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
  2. 30. Oktober 2026CVE-2026-111357Connect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
  3. 13. Oktober 2026CVE-2026-104935Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability
  4. 11. Juni 2026CVE-2026-10520SentryIvanti Sentry OS Command Injection Vulnerability
  5. 7. Mai 2026CVE-2026-6973Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
  6. 8. April 2026CVE-2026-1340Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  7. 9. März 2026CVE-2026-1603 Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
  8. 29. Januar 2026CVE-2026-1281Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  9. 19. Mai 2025CVE-2025-4428Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  10. 19. Mai 2025CVE-2025-4427Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
  11. 4. April 2025CVE-2025-22457Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware
  12. 10. März 2025CVE-2024-13161Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  13. 10. März 2025CVE-2024-13160Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  14. 10. März 2025CVE-2024-13159Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  15. 8. Januar 2025CVE-2025-0282Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware
  16. 9. Oktober 2024CVE-2024-9380Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
  17. 9. Oktober 2024CVE-2024-9379Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
  18. 2. Oktober 2024CVE-2024-29824Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
  19. 24. September 2024CVE-2024-7593Virtual Traffic ManagerIvanti Virtual Traffic Manager Authentication Bypass Vulnerability
  20. 19. September 2024CVE-2024-8963Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
  21. 13. September 2024CVE-2024-8190Cloud Services ApplianceIvanti Cloud Services Appliance OS Command Injection Vulnerability
  22. 25. März 2024CVE-2021-44529Endpoint Manager Cloud Service Appliance (EPM CSA)Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ransomware
  23. 31. Januar 2024CVE-2024-21893Connect Secure, Policy Secure, and NeuronsIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityRansomware
  24. 18. Januar 2024CVE-2023-35082Endpoint Manager Mobile (EPMM) and MobileIron CoreIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityRansomware
  25. 10. Januar 2024CVE-2024-21887Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Command Injection VulnerabilityRansomware
  26. 10. Januar 2024CVE-2023-46805Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityRansomware
  27. 22. August 2023CVE-2023-38035SentryIvanti Sentry Authentication Bypass VulnerabilityRansomware
  28. 31. Juli 2023CVE-2023-35081Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
  29. 25. Juli 2023CVE-2023-35078Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityRansomware
  30. 3. November 2021CVE-2021-22900Pulse Connect SecureIvanti Pulse Connect Secure Unrestricted File Upload Vulnerability
  31. 3. November 2021CVE-2021-22899Pulse Connect SecureIvanti Pulse Connect Secure Command Injection Vulnerability
  32. 3. November 2021CVE-2021-22894Pulse Connect SecureIvanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
  33. 3. November 2021CVE-2021-22893Pulse Connect SecureIvanti Pulse Connect Secure Use-After-Free VulnerabilityRansomware
  34. 3. November 2021CVE-2020-8260Pulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability
  35. 3. November 2021CVE-2020-8243Pulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability
  36. 3. November 2021CVE-2020-15505MobileIron Multiple ProductsIvanti MobileIron Multiple Products Remote Code Execution Vulnerability
  37. 3. November 2021CVE-2019-11539Pulse Connect Secure and Pulse Policy SecureIvanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityRansomware
  38. 3. November 2021CVE-2019-11510Pulse Connect SecureIvanti Pulse Connect Secure Arbitrary File Read VulnerabilityRansomware

Daten: Known-Exploited-Vulnerabilities-Katalog (KEV) der CISA, zuletzt ergänzt am 4. November 2026.
Der Katalog enthält nur Schwachstellen mit Belegen für eine Ausnutzung, nicht alle Schwachstellen des Herstellers.

Warnungen nur zu Ihren Produkten

Mit My Defence erhalten Sie Warnungen und Briefings nur zu den Produkten, die Sie einsetzen, auch von Ivanti.

Kostenlos testenMy Defence

Alle HerstellerDer Katalog auf der Website der CISA