Ivanti Connect Secure vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
99 matching records
- High7.2OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve rCheck this weekEPSS 23.02%Jul 8, 2025
- High8.8A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.Check if you run itEPSS 0.38%Jun 10, 2025
- High7.3A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password.Check if you run itEPSS 0.36%Jun 10, 2025
- High8.8A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.Check if you run itEPSS 0.38%Jun 10, 2025
- Critical9.8An authentication bypass in Ivanti Neurons for ITSM (on-prem only) before 2023.4, 2024.2 and 2024.3 with the May 2025 Security Patch allows a remote unauthenticated attacker to gaiCheck if you run itEPSS 2.13%May 13, 2025
- High7.8Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges.Check if you run itEPSS 0.34%May 13, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 88.00%May 13, 2025
- High7.5Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.93%May 13, 2025
- Medium5.8A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9.Check if you run itEPSS 1.47%Apr 23, 2025
- Critical9.8Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Apr 3, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 89.81%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 90.98%Jan 14, 2025
- High7.5Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityPatch nowKEVEPSS 99.99%Jan 14, 2025
- UnknownIvanti Connect Secure, Policy Secure, and Neurons stack-based buffer overflowPatch nowKEVEPSS 17.46%Jan 8, 2025
- Critical9.0Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Jan 8, 2025
- UnknownIvanti avalanche Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 91.98%Dec 12, 2024
- UnknownIvanti Connect Secure and Policy Secure Out-of-bounds WritePatch nowKEVEPSS 18.99%Oct 30, 2024
- UnknownIvanti CSA Path Traversal Security Bypass VulnerabilityPatch nowKEVEPSS 15.55%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityPatch nowKEVEPSS 58.32%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityPatch nowKEVEPSS 44.27%Oct 8, 2024
- Critical9.1Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityPatch nowKEVEPSS 98.61%Sep 19, 2024
- High7.2Ivanti Cloud Services Appliance OS Command Injection VulnerabilityPatch nowKEVEPSS 88.53%Sep 10, 2024
- Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 100.00%Aug 6, 2024
- High8.8Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityPatch nowKEVEPSS 99.94%May 31, 2024
- UnknownIvanti neurons_for_itsm Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.00%May 14, 2024