İçeriğe atla
Noroxi

ivanti kayıtları

ivanti üreticisine ait 504 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
35 · %6,9
Silahlaştırılmış
39 · %7,7
Pre-auth RCE
45
Düzeltme kaydı olan
%12,5
Yayından KEV’e ortanca
27 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

504 kayıt
  • CVE-2019-11510
    100Hemen

    In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attack

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100

    ivanti · connect secure8 May 2019

  • CVE-2026-10520
    100Hemen

    An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %100

    ivanti · standalone sentry9 Haz 2026

  • CVE-2024-7593
    99Hemen

    Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    ivanti · virtual traffic manager13 Ağu 2024

  • CVE-2023-35078
    99Hemen

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the appli

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    ivanti · endpoint manager mobile25 Tem 2023

  • CVE-2023-35082
    99Hemen

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resou

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    ivanti · endpoint manager mobile15 Ağu 2023

  • CVE-2025-22457
    99Hemen

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    ivanti · connect secure3 Nis 2025

  • CVE-2023-38035
    99Hemen

    A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass a

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    ivanti · mobileiron sentry21 Ağu 2023

  • CVE-2021-44529
    99Hemen

    A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code wit

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    ivanti · endpoint manager cloud services appliance8 Ara 2021

  • CVE-2026-1281
    99Hemen

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    ivanti · endpoint manager mobile29 Oca 2026

  • CVE-2026-1340
    99Hemen

    A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    ivanti · endpoint manager mobile29 Oca 2026

  • CVE-2024-21887
    96Hemen

    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an aut

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %100

    ivanti · connect secure12 Oca 2024

  • CVE-2025-0282
    96Hemen

    A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %100

    ivanti · connect secure8 Oca 2025

  • CVE-2024-8963
    96Hemen

    Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %99

    ivanti · endpoint manager cloud services appliance19 Eyl 2024

  • CVE-2024-29824
    95Hemen

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the sam

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %100

    ivanti · endpoint manager31 May 2024

  • CVE-2024-21893
    92Hemen

    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x)

    YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %100

    ivanti · connect secure31 Oca 2024

  • CVE-2023-46805
    92Hemen

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to acc

    YüksekCVSS 8,2KEVSilahlaştırılmışEPSS %100

    ivanti · connect secure12 Oca 2024

  • CVE-2025-4428
    91Hemen

    Remote Code Execution

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %87

    ivanti · endpoint manager mobile13 May 2025

  • CVE-2024-13159
    90Hemen

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    ivanti · endpoint manager14 Oca 2025

  • CVE-2025-4427
    90Hemen

    Authentication Bypass

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100

    ivanti · endpoint manager mobile13 May 2025

  • CVE-2019-11539
    88Hemen

    In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 an

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %99

    ivanti · connect secure25 Nis 2019

  • CVE-2020-8260
    87Hemen

    A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code e

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %96

    ivanti · connect secure28 Eki 2020

  • CVE-2024-13160
    87Hemen

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %91

    ivanti · endpoint manager14 Oca 2025

  • CVE-2024-13161
    87Hemen

    Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %90

    ivanti · endpoint manager14 Oca 2025

  • CVE-2026-1603
    86Hemen

    An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %88

    ivanti · endpoint manager10 Şub 2026

  • CVE-2020-8243
    85Hemen

    A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %91

    ivanti · connect secure30 Eyl 2020