IT
DeutschEnglishEspañolFrançaisItaliano

Prova gratis Dashboard

Vulnerabilità sfruttate

Ivanti

38 vulnerabilità di Ivanti nel catalogo KEV della CISA: quelle per cui l'agenzia statunitense per la sicurezza informatica ha prove di sfruttamento in attacchi reali.

Nel catalogo38
Ultimi 12 mesi8
In campagne ransomware12
Ultima aggiunta30 ottobre 2026

Le vulnerabilità38

  1. 30 ottobre 2026CVE-2026-118527Connect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
  2. 30 ottobre 2026CVE-2026-111357Connect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
  3. 13 ottobre 2026CVE-2026-104935Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability
  4. 11 giugno 2026CVE-2026-10520SentryIvanti Sentry OS Command Injection Vulnerability
  5. 7 maggio 2026CVE-2026-6973Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
  6. 8 aprile 2026CVE-2026-1340Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  7. 9 marzo 2026CVE-2026-1603 Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
  8. 29 gennaio 2026CVE-2026-1281Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  9. 19 maggio 2025CVE-2025-4428Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  10. 19 maggio 2025CVE-2025-4427Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
  11. 4 aprile 2025CVE-2025-22457Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware
  12. 10 marzo 2025CVE-2024-13161Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  13. 10 marzo 2025CVE-2024-13160Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  14. 10 marzo 2025CVE-2024-13159Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  15. 8 gennaio 2025CVE-2025-0282Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware
  16. 9 ottobre 2024CVE-2024-9380Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
  17. 9 ottobre 2024CVE-2024-9379Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
  18. 2 ottobre 2024CVE-2024-29824Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
  19. 24 settembre 2024CVE-2024-7593Virtual Traffic ManagerIvanti Virtual Traffic Manager Authentication Bypass Vulnerability
  20. 19 settembre 2024CVE-2024-8963Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
  21. 13 settembre 2024CVE-2024-8190Cloud Services ApplianceIvanti Cloud Services Appliance OS Command Injection Vulnerability
  22. 25 marzo 2024CVE-2021-44529Endpoint Manager Cloud Service Appliance (EPM CSA)Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ransomware
  23. 31 gennaio 2024CVE-2024-21893Connect Secure, Policy Secure, and NeuronsIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityRansomware
  24. 18 gennaio 2024CVE-2023-35082Endpoint Manager Mobile (EPMM) and MobileIron CoreIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityRansomware
  25. 10 gennaio 2024CVE-2024-21887Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Command Injection VulnerabilityRansomware
  26. 10 gennaio 2024CVE-2023-46805Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityRansomware
  27. 22 agosto 2023CVE-2023-38035SentryIvanti Sentry Authentication Bypass VulnerabilityRansomware
  28. 31 luglio 2023CVE-2023-35081Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
  29. 25 luglio 2023CVE-2023-35078Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityRansomware
  30. 3 novembre 2021CVE-2021-22900Pulse Connect SecureIvanti Pulse Connect Secure Unrestricted File Upload Vulnerability
  31. 3 novembre 2021CVE-2021-22899Pulse Connect SecureIvanti Pulse Connect Secure Command Injection Vulnerability
  32. 3 novembre 2021CVE-2021-22894Pulse Connect SecureIvanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
  33. 3 novembre 2021CVE-2021-22893Pulse Connect SecureIvanti Pulse Connect Secure Use-After-Free VulnerabilityRansomware
  34. 3 novembre 2021CVE-2020-8260Pulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability
  35. 3 novembre 2021CVE-2020-8243Pulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability
  36. 3 novembre 2021CVE-2020-15505MobileIron Multiple ProductsIvanti MobileIron Multiple Products Remote Code Execution Vulnerability
  37. 3 novembre 2021CVE-2019-11539Pulse Connect Secure and Pulse Policy SecureIvanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityRansomware
  38. 3 novembre 2021CVE-2019-11510Pulse Connect SecureIvanti Pulse Connect Secure Arbitrary File Read VulnerabilityRansomware

Dati: catalogo Known Exploited Vulnerabilities (KEV) della CISA, ultima aggiunta il 4 novembre 2026.
Il catalogo elenca solo le vulnerabilità con prove di sfruttamento, non tutte quelle del produttore.

Avvisi solo sui prodotti che usi

Con My Defence ricevi avvisi e briefing solo sui prodotti che usi, anche di Ivanti.

Prova gratisMy Defence

Tutti i produttoriIl catalogo sul sito della CISA