Ivanti Desktop \& Server Management vulnerabilities

6 vulnerabilities

Known vulnerabilities in Ivanti Desktop \& Server Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1CVE-2024-7572ivantidesktop_\&_server_management
EPSS score
0.21%
Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files.7.8CVE-2024-29821ivantidesktop_\&_server_management+1
EPSS score
0.22%
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.7.8CVE-2024-29213ivantidesktop_\&_server_management+1
EPSS score
0.22%
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.9CVE-2024-38648ivantidesktop_\&_server_management+1
EPSS score
0.59%
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.7.8CVE-2026-3483ivantidesktop_\&_server_management
EPSS score
0.41%
An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.7.8CVE-2023-28129ivantidesktop_\&_server_management
EPSS score
0.32%
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.