EN
DeutschEnglishEspañolFrançaisItaliano

Start free Dashboard

Exploited vulnerabilities

Ivanti

38 Ivanti vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.

In the catalogue38
Last 12 months8
In ransomware campaigns12
Last addition30 October 2026

The vulnerabilities38

  1. 30 October 2026CVE-2026-118527Connect SecureIvanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
  2. 30 October 2026CVE-2026-111357Connect SecureIvanti Connect Secure Missing Authentication for Critical Function Vulnerability
  3. 13 October 2026CVE-2026-104935Connect SecureIvanti Connect Secure Authentication Bypass by Spoofing Vulnerability
  4. 11 June 2026CVE-2026-10520SentryIvanti Sentry OS Command Injection Vulnerability
  5. 7 May 2026CVE-2026-6973Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
  6. 8 April 2026CVE-2026-1340Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  7. 9 March 2026CVE-2026-1603 Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
  8. 29 January 2026CVE-2026-1281Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  9. 19 May 2025CVE-2025-4428Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
  10. 19 May 2025CVE-2025-4427Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
  11. 4 April 2025CVE-2025-22457Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware
  12. 10 March 2025CVE-2024-13161Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  13. 10 March 2025CVE-2024-13160Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  14. 10 March 2025CVE-2024-13159Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
  15. 8 January 2025CVE-2025-0282Connect Secure, Policy Secure, and ZTA GatewaysIvanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityRansomware
  16. 9 October 2024CVE-2024-9380Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
  17. 9 October 2024CVE-2024-9379Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
  18. 2 October 2024CVE-2024-29824Endpoint Manager (EPM)Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
  19. 24 September 2024CVE-2024-7593Virtual Traffic ManagerIvanti Virtual Traffic Manager Authentication Bypass Vulnerability
  20. 19 September 2024CVE-2024-8963Cloud Services Appliance (CSA)Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
  21. 13 September 2024CVE-2024-8190Cloud Services ApplianceIvanti Cloud Services Appliance OS Command Injection Vulnerability
  22. 25 March 2024CVE-2021-44529Endpoint Manager Cloud Service Appliance (EPM CSA)Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Ransomware
  23. 31 January 2024CVE-2024-21893Connect Secure, Policy Secure, and NeuronsIvanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityRansomware
  24. 18 January 2024CVE-2023-35082Endpoint Manager Mobile (EPMM) and MobileIron CoreIvanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityRansomware
  25. 10 January 2024CVE-2024-21887Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Command Injection VulnerabilityRansomware
  26. 10 January 2024CVE-2023-46805Connect Secure and Policy SecureIvanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityRansomware
  27. 22 August 2023CVE-2023-38035SentryIvanti Sentry Authentication Bypass VulnerabilityRansomware
  28. 31 July 2023CVE-2023-35081Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
  29. 25 July 2023CVE-2023-35078Endpoint Manager Mobile (EPMM)Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityRansomware
  30. 3 November 2021CVE-2021-22900Pulse Connect SecureIvanti Pulse Connect Secure Unrestricted File Upload Vulnerability
  31. 3 November 2021CVE-2021-22899Pulse Connect SecureIvanti Pulse Connect Secure Command Injection Vulnerability
  32. 3 November 2021CVE-2021-22894Pulse Connect SecureIvanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
  33. 3 November 2021CVE-2021-22893Pulse Connect SecureIvanti Pulse Connect Secure Use-After-Free VulnerabilityRansomware
  34. 3 November 2021CVE-2020-8260Pulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability
  35. 3 November 2021CVE-2020-8243Pulse Connect SecureIvanti Pulse Connect Secure Code Execution Vulnerability
  36. 3 November 2021CVE-2020-15505MobileIron Multiple ProductsIvanti MobileIron Multiple Products Remote Code Execution Vulnerability
  37. 3 November 2021CVE-2019-11539Pulse Connect Secure and Pulse Policy SecureIvanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityRansomware
  38. 3 November 2021CVE-2019-11510Pulse Connect SecureIvanti Pulse Connect Secure Arbitrary File Read VulnerabilityRansomware

Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.

Alerts only on the products you use

With My Defence you receive alerts and briefings only on the products you use, Ivanti included.

Start freeMy Defence

All vendorsThe catalogue on the CISA website