Ivanti vulnerabilities, page 5
509 vulnerabilities
Known vulnerabilities in Ivanti products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 85 products.
MediumCVE-2025-0292ivanti · connect_secure +1 moreivanti connect_secureSSRF in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to access internal network services.EPSS0.57%MediumCVE-2025-0293ivanti · connect_secure +1 moreivanti connect_secureCLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk.EPSS0.41%HighCVE-2025-0283ivanti · connect_secure +2 moreivanti connect_secureA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.EPSS17.46%CriticalCVE-2025-0282ivanti · connect_secure +3 moreivanti connect_secureA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.KEVRansomwareEPSS99.98%HighCVE-2025-9712ivanti · endpoint_managerivanti endpoint_managerInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.EPSS23.86%HighCVE-2025-9872ivanti · endpoint_managerivanti endpoint_managerInsufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.EPSS15.79%HighCVE-2025-9713ivanti · endpoint_managerivanti endpoint_managerPath traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.EPSS15.33%HighCVE-2025-4427ivanti · endpoint_manager_mobileAuthentication BypassAn authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.KEVEPSS99.93%HighCVE-2025-4428ivanti · endpoint_manager_mobileRemote Code ExecutionRemote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers to execute arbitrary code via crafted API requests.KEVEPSS88.00%MediumCVE-2025-43716ivanti · landesk_management_suiteivanti landesk_management_suiteA directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access controls and gain unauthorized access to various endpoints such as /client/index.php%3F.php/gsb/firewall.php within the management web panel, potentially exposing sensitive device information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.EPSS1.21%HighCVE-2025-7037ivanti · endpoint_managerSQL injection in Ivanti Endpoint ManagerSQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote authenticated attacker with admin privileges to read arbitrary data from the databaseEPSS0.95%MediumCVE-2025-5463ivanti · connect_secure +1 moreivanti connect_secureInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information.EPSS0.31%HighCVE-2025-5456ivanti · connect_secure +3 moreivanti connect_secureA buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service. CWE-125EPSS1.12%MediumCVE-2025-5464ivanti · connect_secureivanti connect_secureInsertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information.EPSS0.31%MediumCVE-2025-5466ivanti · connect_secure +3 moreivanti connect_secureXEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to trigger a denial of serviceEPSS0.68%HighCVE-2025-5462ivanti · connect_secure +3 moreivanti connect_secureA heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service.EPSS1.14%HighCVE-2025-5353ivanti · workspace_controlivanti workspace_controlA hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.EPSS0.38%MediumCVE-2025-5468ivanti · connect_secure +3 moreivanti connect_secureImproper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a local authenticated attacker to read arbitrary files on disk.EPSS0.36%MediumCVE-2025-5451ivanti · connect_secure +1 moreivanti connect_secureA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to trigger a denial of service.EPSS0.70%MediumCVE-2025-5450ivanti · connect_secure +1 moreivanti connect_secureImproper access control in the certificate management component of Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated admin with read-only rights to modify settings that should be restricted.EPSS0.27%