Ivanti DSM vulnerabilities

3 vulnerabilities

Known vulnerabilities in Ivanti DSM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2024-29821ivantidesktop_\&_server_management+1
EPSS score
0.22%
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.7.8CVE-2024-29213ivantidesktop_\&_server_management+1
EPSS score
0.22%
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.9CVE-2024-38648ivantidesktop_\&_server_management+1
EPSS score
0.59%
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.