netVigilance Vulnerability intelligence since 2004

Ivanti

35 Ivanti vulnerabilities with confirmed exploitation in the wild, as published by CISA; 35 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Ivanti
Vulnerability Status
overdue 88d2026-06-14 CVE-2026-10520 Ivanti / Sentry Ivanti Sentry OS Command Injection Vulnerability 2026-06-11 10.0 past due
overdue 123d2026-05-10 CVE-2026-6973 Ivanti / Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability 2026-05-07 7.2 past due
overdue 152d2026-04-11 CVE-2026-1340 Ivanti / Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability 2026-04-08 9.8 past due
overdue 171d2026-03-23 CVE-2026-1603 Ivanti / Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability 2026-03-09 7.5 past due
overdue 221d2026-02-01 CVE-2026-1281 Ivanti / Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability 2026-01-29 9.8 past due
overdue 458d2025-06-09 CVE-2025-4428 Ivanti / Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability 2025-05-19 8.8 past due
overdue 458d2025-06-09 CVE-2025-4427 Ivanti / Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability 2025-05-19 7.5 past due
overdue 517d2025-04-11 CVE-2025-22457 Ivanti / Connect Secure, Policy Secure, and ZTA Gateways Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability 2025-04-04 9.8 past dueransomware
overdue 528d2025-03-31 CVE-2024-13161 Ivanti / Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 7.5 past due
overdue 528d2025-03-31 CVE-2024-13160 Ivanti / Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 7.5 past due
overdue 528d2025-03-31 CVE-2024-13159 Ivanti / Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability 2025-03-10 7.5 past due
overdue 603d2025-01-15 CVE-2025-0282 Ivanti / Connect Secure, Policy Secure, and ZTA Gateways Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability 2025-01-08 9.0 past dueransomware
overdue 680d2024-10-30 CVE-2024-9380 Ivanti / Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability 2024-10-09 7.2 past due
overdue 680d2024-10-30 CVE-2024-9379 Ivanti / Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability 2024-10-09 7.2 past due
overdue 687d2024-10-23 CVE-2024-29824 Ivanti / Endpoint Manager (EPM) Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability 2024-10-02 8.8 past due
overdue 695d2024-10-15 CVE-2024-7593 Ivanti / Virtual Traffic Manager Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability 2024-09-24 9.8 past due
overdue 700d2024-10-10 CVE-2024-8963 Ivanti / Cloud Services Appliance (CSA) Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability 2024-09-19 9.1 past due
overdue 706d2024-10-04 CVE-2024-8190 Ivanti / Cloud Services Appliance Ivanti Cloud Services Appliance OS Command Injection Vulnerability 2024-09-13 7.2 past due
overdue 878d2024-04-15 CVE-2021-44529 Ivanti / Endpoint Manager Cloud Service Appliance (EPM CSA) Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability 2024-03-25 9.8 past dueransomware
overdue 951d2024-02-02 CVE-2024-21893 Ivanti / Connect Secure, Policy Secure, and Neurons Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability 2024-01-31 8.2 past dueransomware
overdue 945d2024-02-08 CVE-2023-35082 Ivanti / Endpoint Manager Mobile (EPMM) and MobileIron Core Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability 2024-01-18 9.8 past dueransomware
overdue 962d2024-01-22 CVE-2024-21887 Ivanti / Connect Secure and Policy Secure Ivanti Connect Secure and Policy Secure Command Injection Vulnerability 2024-01-10 9.1 past dueransomware
overdue 962d2024-01-22 CVE-2023-46805 Ivanti / Connect Secure and Policy Secure Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability 2024-01-10 8.2 past dueransomware
overdue 1094d2023-09-12 CVE-2023-38035 Ivanti / Sentry Ivanti Sentry Authentication Bypass Vulnerability 2023-08-22 9.8 past dueransomware
overdue 1116d2023-08-21 CVE-2023-35081 Ivanti / Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability 2023-07-31 7.2 past due
overdue 1122d2023-08-15 CVE-2023-35078 Ivanti / Endpoint Manager Mobile (EPMM) Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability 2023-07-25 9.8 past dueransomware
overdue 1591d2022-05-03 CVE-2021-22900 Ivanti / Pulse Connect Secure Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability 2021-11-03 7.2 past due
overdue 1591d2022-05-03 CVE-2021-22899 Ivanti / Pulse Connect Secure Ivanti Pulse Connect Secure Command Injection Vulnerability 2021-11-03 8.8 past due
overdue 1591d2022-05-03 CVE-2021-22894 Ivanti / Pulse Connect Secure Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability 2021-11-03 8.8 past due
overdue 1591d2022-05-03 CVE-2021-22893 Ivanti / Pulse Connect Secure Ivanti Pulse Connect Secure Use-After-Free Vulnerability 2021-11-03 10.0 past dueransomware
overdue 1591d2022-05-03 CVE-2020-8260 Ivanti / Pulse Connect Secure Ivanti Pulse Connect Secure Code Execution Vulnerability 2021-11-03 7.2 past due
overdue 1591d2022-05-03 CVE-2020-8243 Ivanti / Pulse Connect Secure Ivanti Pulse Connect Secure Code Execution Vulnerability 2021-11-03 7.2 past due
overdue 1591d2022-05-03 CVE-2020-15505 Ivanti / MobileIron Multiple Products Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability 2021-11-03 9.8 past due
overdue 1591d2022-05-03 CVE-2019-11539 Ivanti / Pulse Connect Secure and Pulse Policy Secure Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability 2021-11-03 7.2 past dueransomware
overdue 1591d2022-05-03 CVE-2019-11510 Ivanti / Pulse Connect Secure Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability 2021-11-03 10.0 past dueransomware