Ivanti

Las vulnerabilidades38

1. 30 de octubre de 2026CVE-2026-118527Connect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
2. 30 de octubre de 2026CVE-2026-111357Connect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
3. 13 de octubre de 2026CVE-2026-104935Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability
4. 11 de junio de 2026CVE-2026-10520SentryIvanti Sentry OS Command Injection Vulnerability
5. 7 de mayo de 2026CVE-2026-6973Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
6. 8 de abril de 2026CVE-2026-1340Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
7. 9 de marzo de 2026CVE-2026-1603 Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
8. 29 de enero de 2026CVE-2026-1281Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
9. 19 de mayo de 2025CVE-2025-4428Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
10. 19 de mayo de 2025CVE-2025-4427Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
11. 4 de abril de 2025CVE-2025-22457Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware
12. 10 de marzo de 2025CVE-2024-13161Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
13. 10 de marzo de 2025CVE-2024-13160Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
14. 10 de marzo de 2025CVE-2024-13159Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
15. 8 de enero de 2025CVE-2025-0282Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware
16. 9 de octubre de 2024CVE-2024-9380Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
17. 9 de octubre de 2024CVE-2024-9379Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
18. 2 de octubre de 2024CVE-2024-29824Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
19. 24 de septiembre de 2024CVE-2024-7593Virtual Traffic ManagerIvanti Virtual Traffic Manager Authentication Bypass Vulnerability
20. 19 de septiembre de 2024CVE-2024-8963Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
21. 13 de septiembre de 2024CVE-2024-8190Cloud Services ApplianceIvanti Cloud Services Appliance OS Command Injection Vulnerability
22. 25 de marzo de 2024CVE-2021-44529Endpoint Manager Cloud Service Appliance (EPM CSA)Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ransomware
23. 31 de enero de 2024CVE-2024-21893Connect Secure, Policy Secure, and NeuronsIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityRansomware
24. 18 de enero de 2024CVE-2023-35082Endpoint Manager Mobile (EPMM) and MobileIron CoreIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityRansomware
25. 10 de enero de 2024CVE-2024-21887Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Command Injection VulnerabilityRansomware
26. 10 de enero de 2024CVE-2023-46805Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityRansomware
27. 22 de agosto de 2023CVE-2023-38035SentryIvanti Sentry Authentication Bypass VulnerabilityRansomware
28. 31 de julio de 2023CVE-2023-35081Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
29. 25 de julio de 2023CVE-2023-35078Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityRansomware
30. 3 de noviembre de 2021CVE-2021-22900Pulse Connect SecureIvanti Pulse Connect Secure Unrestricted File Upload Vulnerability
31. 3 de noviembre de 2021CVE-2021-22899Pulse Connect SecureIvanti Pulse Connect Secure Command Injection Vulnerability
32. 3 de noviembre de 2021CVE-2021-22894Pulse Connect SecureIvanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
33. 3 de noviembre de 2021CVE-2021-22893Pulse Connect SecureIvanti Pulse Connect Secure Use-After-Free VulnerabilityRansomware
34. 3 de noviembre de 2021CVE-2020-8260Pulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability
35. 3 de noviembre de 2021CVE-2020-8243Pulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability
36. 3 de noviembre de 2021CVE-2020-15505MobileIron Multiple ProductsIvanti MobileIron Multiple Products Remote Code Execution Vulnerability
37. 3 de noviembre de 2021CVE-2019-11539Pulse Connect Secure and Pulse Policy SecureIvanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityRansomware
38. 3 de noviembre de 2021CVE-2019-11510Pulse Connect SecureIvanti Pulse Connect Secure Arbitrary File Read VulnerabilityRansomware

Datos: catálogo Known Exploited Vulnerabilities (KEV) de la CISA, última incorporación el 4 de noviembre de 2026.
El catálogo solo recoge las vulnerabilidades con pruebas de explotación, no todas las del fabricante.