Ivanti vulnerabilities
509 vulnerabilities
Known vulnerabilities in Ivanti products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 85 products.
Products
50 of 85- Connect Secure134 vulnerabilities
- Avalanche117 vulnerabilities
- Endpoint Manager116 vulnerabilities
- Policy Secure78 vulnerabilities
- EPM33 vulnerabilities
- Endpoint Manager Mobile29 vulnerabilities
- Workspace Control22 vulnerabilities
- Secure Access Client21 vulnerabilities
- Zero Trust Access Gateway17 vulnerabilities
- Neurons For Secure Access15 vulnerabilities
- Neurons For Itsm14 vulnerabilities
- EPMM11 vulnerabilities
- Cloud Services Appliance7 vulnerabilities
- Landesk Management Suite7 vulnerabilities
- Desktop \& Server Management6 vulnerabilities
- Endpoint Manager Cloud Services Appliance5 vulnerabilities
- ICS5 vulnerabilities
- IPS5 vulnerabilities
- ITSM5 vulnerabilities
- Neurons For Zero Trust Access5 vulnerabilities
- Standalone Sentry4 vulnerabilities
- Wavelink4 vulnerabilities
- DSM3 vulnerabilities
- Incapptic Connect3 vulnerabilities
- Security Controls3 vulnerabilities
- Xtraction3 vulnerabilities
- Application Control2 vulnerabilities
- Automation2 vulnerabilities
- Ivanti Endpoint Manager2 vulnerabilities
- Mobileiron2 vulnerabilities
- Mobileiron Core2 vulnerabilities
- Secure Access Client Windows2 vulnerabilities
- Secure Access Linux2 vulnerabilities
- Sentry2 vulnerabilities
- Virtual Traffic Manager2 vulnerabilities
- Avlanche1 vulnerabilities
- Desktop\&Server Management1 vulnerabilities
- Docs\@Work1 vulnerabilities
- Dsm Netinst1 vulnerabilities
- Dsm Remote1 vulnerabilities
- Endpoint Security1 vulnerabilities
- Mobileiron Sentry1 vulnerabilities
- Neurons Agent Platform1 vulnerabilities
- Neurons For Patch Management1 vulnerabilities
- Neurons For ZTA Gateways1 vulnerabilities
- Patch For Configuration Manager1 vulnerabilities
- Patch Software Development Kit1 vulnerabilities
- Performance Manager1 vulnerabilities
- Pulse Secure Desktop Client1 vulnerabilities
- Pulse Secure Installer Service1 vulnerabilities
CVE-2026-111357ivanticonnect_secure
EPSS score0.25%
Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.CVE-2026-104935ivanticonnect_secureKEVEPSS score25.98%
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.CVE-2018-20810ivanticonnect_secure+1EPSS score1.77%
Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices.CVE-2018-20811ivanticonnect_secureEPSS score2.15%
A hidden RPC service issue was found with Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2 and 8.1RX before 8.1R12.CVE-2018-20808ivanticonnect_secureEPSS score1.60%
An XSS issue has been found with rd.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R3 due to improper header sanitization. This is not applicable to 8.1RX.CVE-2018-20809ivanticonnect_secure+1EPSS score2.73%
A crafted message can cause the web server to crash with Pulse Secure Pulse Connect Secure (PCS) 8.3RX before 8.3R5 and Pulse Policy Secure 5.4RX before 5.4R5. This is not applicable to PCS 8.1RX.CVE-2018-20813ivanticonnect_secureEPSS score3.08%
An input validation issue has been found with login_meeting.cgi in Pulse Secure Pulse Connect Secure 8.3RX before 8.3R2.CVE-2018-20807ivanticonnect_secureEPSS score1.60%
An XSS issue has been found in welcome.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1.x before 8.1R12, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 due to one of the URL parameters not being sanitized properly.CVE-2018-20814ivanticonnect_secure+1EPSS score1.59%
An XSS issue was found with Psaldownload.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.3R2 before 8.3R2 and Pulse Policy Secure (PPS) 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX or PPS 5.2RX.CVE-2018-14366ivanticonnect_secure+2EPSS score1.48%
download.cgi in Pulse Secure Pulse Connect Secure 8.1RX before 8.1R13 and 8.3RX before 8.3R4 and Pulse Policy Secure through 5.2RX before 5.2R10 and 5.4RX before 5.4R4 have an Open Redirect Vulnerability.CVE-2018-15591ivantiworkspace_controlEPSS score1.28%
An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can bypass Application Whitelisting restrictions to execute arbitrary code by leveraging multiple unspecified attack vectors.CVE-2018-15592ivantiworkspace_controlEPSS score0.59%
An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can execute processes with elevated privileges via an unspecified attack vector.CVE-2018-15593ivantiworkspace_controlEPSS score1.03%
An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or relay server password by leveraging an unspecified attack vector.CVE-2018-15590ivantiworkspace_controlEPSS score0.99%
An issue was discovered in Ivanti Workspace Control before 10.3.0.0 and RES One Workspace, when file and folder security are configured. A local authenticated user can bypass file and folder security restriction by leveraging an unspecified attack vector.CVE-2018-6316ivantiendpoint_securityEPSS score1.87%
Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.CVE-2018-6320ivanticonnect_secure+2EPSS score4.08%
A vulnerability has been discovered in login.cgi in Pulse Secure Pulse Connect Secure (PCS) 8.1RX before 8.1R12 and 8.3RX before 8.3R2 and Pulse Policy Secure (PPS) 5.2RX before 5.2R9 and 5.4RX before 5.4R2 wherein an http(s) Host header received from the browser is trusted without validation.CVE-2018-8902ivantiavalancheEPSS score1.74%
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption model to encrypt data. A user with access to system databases can use the discovered key to access potentially confidential stored data, which may include Wi-Fi passwords. This discovered key can be used for all instances of the product.CVE-2018-8901ivantiavalancheEPSS score0.66%
An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. A local user with database access privileges can read the encrypted passwords for users who authenticate via LDAP to Avalanche services. These passwords are stored in the Avalanche databases. This issue only affects customers who have enabled LDAP authentication in their configuration.CVE-2021-42131ivantiavalancheEPSS score66.53%
A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.CVE-2021-42132ivantiavalancheEPSS score70.13%
A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.