Skip to content
THREATWIRE

CVE Tracker · Vendor

Ivanti CVEs

40 CVEs in the tracker, 36 in the CISA KEV catalogue.

All vendors · RSS feed for Ivanti · Tracker data last updated 18 Oct 2026.

Showing 40 of 40

  1. CVE-2026-104935CVSS 8.6 highEPSS 26.0%KEV2026-10-13

    Connect Secure. Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability

  2. CVE-2025-4427CVSS 7.5 highEPSS 100%KEV2025-05-13

    Endpoint Manager Mobile (EPMM). Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

  3. CVE-2025-22457CVSS 9.8 criticalEPSS 100%KEV2025-04-03

    Connect Secure, Policy Secure, and ZTA Gateways. Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

  4. CVE-2024-13159CVSS 7.5 highEPSS 100%KEV2025-01-14

    Endpoint Manager (EPM). Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

  5. CVE-2025-0282CVSS 9.0 criticalEPSS 100%KEV2025-01-08

    Connect Secure, Policy Secure, and ZTA Gateways. Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

  6. CVE-2024-8963CVSS 9.1 criticalEPSS 98.6%KEV2024-09-19

    Cloud Services Appliance (CSA). Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

  7. CVE-2024-7593CVSS 9.8 criticalEPSS 100%KEV2024-08-13

    Virtual Traffic Manager. Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

  8. CVE-2024-29826CVSS 8.8 highEPSS 100%2024-05-31

    endpoint manager. An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthen…

  9. CVE-2024-29825CVSS 8.8 highEPSS 100%2024-05-31

    endpoint manager. An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthen…

  10. CVE-2024-29824CVSS 8.8 highEPSS 100%KEV2024-05-31

    Endpoint Manager (EPM). Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

  11. CVE-2024-29823CVSS 8.8 highEPSS 100%2024-05-31

    endpoint manager. An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthen…

  12. CVE-2024-21893CVSS 8.2 highEPSS 100%KEV2024-01-31

    Connect Secure, Policy Secure, and Neurons. Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

  13. CVE-2024-21887CVSS 9.1 criticalEPSS 100%KEV2024-01-12

    Connect Secure and Policy Secure. Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

  14. CVE-2023-46805CVSS 8.2 highEPSS 100%KEV2024-01-12

    Connect Secure and Policy Secure. Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

  15. CVE-2023-38035CVSS 9.8 criticalEPSS 100%KEV2023-08-21

    Sentry. Ivanti Sentry Authentication Bypass Vulnerability

  16. CVE-2023-35082CVSS 9.8 criticalEPSS 100%KEV2023-08-15

    Endpoint Manager Mobile (EPMM) and MobileIron Core. Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

  17. CVE-2023-32560CVSS 9.8 criticalEPSS 99.4%2023-08-10

    avalanche. An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in ser…

  18. CVE-2023-35078CVSS 9.8 criticalEPSS 100%KEV2023-07-25

    Endpoint Manager Mobile (EPMM). Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

  19. CVE-2021-44529CVSS 9.8 criticalEPSS 99.1%KEV2021-12-08

    Endpoint Manager Cloud Service Appliance (EPM CSA). Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

  20. CVE-2020-15505CVSS 9.8 criticalEPSS 100%KEV2020-07-07

    MobileIron Multiple Products. Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability

  21. CVE-2019-11510CVSS 10.0 criticalEPSS 100%KEV2019-05-08

    Pulse Connect Secure. Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability

  22. CVE-2019-11539CVSS 7.2 highEPSS 98.5%KEV2019-04-26

    Pulse Connect Secure and Pulse Policy Secure. Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability

  23. CVE-2026-6973No CVSSEPSS 2.54%KEV

    Endpoint Manager Mobile (EPMM). Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

  24. CVE-2026-1603No CVSSEPSS 88.3%KEV

    Endpoint Manager (EPM). Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

  25. CVE-2026-1340No CVSSEPSS 98.6%KEV

    Endpoint Manager Mobile (EPMM). Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

  26. CVE-2026-1281No CVSSEPSS 98.7%KEV

    Endpoint Manager Mobile (EPMM). Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

  27. CVE-2026-10520No CVSSEPSS 100%KEV

    Sentry. Ivanti Sentry OS Command Injection Vulnerability

  28. CVE-2025-4428No CVSSEPSS 87.0%KEV

    Endpoint Manager Mobile (EPMM). Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

  29. CVE-2024-9380No CVSSEPSS 59.7%KEV

    Cloud Services Appliance (CSA). Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

  30. CVE-2024-9379No CVSSEPSS 43.8%KEV

    Cloud Services Appliance (CSA). Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

  31. CVE-2024-8190No CVSSEPSS 88.5%KEV

    Cloud Services Appliance. Ivanti Cloud Services Appliance OS Command Injection Vulnerability

  32. CVE-2024-13161No CVSSEPSS 90.1%KEV

    Endpoint Manager (EPM). Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

  33. CVE-2024-13160No CVSSEPSS 91.2%KEV

    Endpoint Manager (EPM). Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

  34. CVE-2023-35081No CVSSEPSS 63.6%KEV

    Endpoint Manager Mobile (EPMM). Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

  35. CVE-2021-22900No CVSSEPSS 14.1%KEV

    Pulse Connect Secure. Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

  36. CVE-2021-22899No CVSSEPSS 22.9%KEV

    Pulse Connect Secure. Ivanti Pulse Connect Secure Command Injection Vulnerability

  37. CVE-2021-22894No CVSSEPSS 41.3%KEV

    Pulse Connect Secure. Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

  38. CVE-2021-22893No CVSSEPSS 47.2%KEV

    Pulse Connect Secure. Ivanti Pulse Connect Secure Use-After-Free Vulnerability

  39. CVE-2020-8260No CVSSEPSS 96.5%KEV

    Pulse Connect Secure. Ivanti Pulse Connect Secure Code Execution Vulnerability

  40. CVE-2020-8243No CVSSEPSS 90.8%KEV

    Pulse Connect Secure. Ivanti Pulse Connect Secure Code Execution Vulnerability