Ivanti Sentry vulnerabilities

2 vulnerabilities

Known vulnerabilities in Ivanti Sentry, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.6CVE-2023-41724ivantisentry+1
EPSS score
12.84%
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.6.8CVE-2023-39338ivantisentry
EPSS score
0.86%
Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access.