Ivanti Virtual Traffic Manager vulnerabilities

2 vulnerabilities

Known vulnerabilities in Ivanti Virtual Traffic Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2024-7593ivantivirtual_traffic_managerKEV
EPSS score
100.00%
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.7.2CVE-2026-8051ivantivirtual_traffic_manager
EPSS score
2.98%
OS command injection in Ivanti Virtual Traffic Manager before version 22.9r4 allows a remote authenticated attacker with admin privileges to achieve remote code execution.