Vulnerability index

Browse CVEs

467 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Endpoint Manager HIGH 7.8
CVE-2024-13172

Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote …

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.8
CVE-2024-13169

An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticat…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.8
CVE-2024-13171EPSS 18%

Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-13168

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-13170

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.8
CVE-2024-13163EPSS 9%

Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remot…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.8
CVE-2024-13164

An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authent…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-13165

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-13166

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-13167

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-13159 KEVEPSS 100%

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthen…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-13160 KEVEPSS 91%

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthen…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-13161 KEVEPSS 90%

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthen…

Fix: 2022+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.2
CVE-2024-13158

An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remot…

Fix: 2024+
Fix from $1,950 2025-01-14
Endpoint Manager HIGH 7.2
CVE-2024-13162EPSS 64%

SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated atta…

Fix: 2022+
Fix from $1,950 2025-01-14
Avalanche CRITICAL 9.8
CVE-2024-13179EPSS 62%

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication.

Fix: 6.4.7+
Fix from $2,300 2025-01-14
Avalanche CRITICAL 9.8
CVE-2024-13181EPSS 32%

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incompl…

Fix: 6.4.6+
Fix from $2,300 2025-01-14
Endpoint Manager HIGH 7.5
CVE-2024-10811

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthen…

Fix: 2022+
Fix from $1,950 2025-01-14
Avalanche HIGH 7.5
CVE-2024-13180EPSS 28%

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses in…

Fix: 6.4.7+
Fix from $1,950 2025-01-14
Application Control HIGH 7.0
CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocki…

Fix: 2023.3+
Fix from $1,950 2025-01-14
Connect Secure CRITICAL 9.0
CVE-2025-0282 KEVEPSS 100%

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for …

Mitigation only
Fix from $2,300 2025-01-08
Connect Secure HIGH 7.0
CVE-2025-0283EPSS 17%

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for …

Fix: 9.1 / 22.7+
Fix from $1,950 2025-01-08
Connect Secure HIGH 7.5
CVE-2024-37401

An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service.

Fix: 22.7+
Fix from $1,950 2024-12-12
Connect Secure HIGH 7.5
CVE-2024-37377

A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of …

Fix: 22.7+
Fix from $1,950 2024-12-12
Workspace Control HIGH 7.8
CVE-2024-8496

Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to ach…

Fix: 10.18.40.0+
Fix from $1,950 2024-12-11
Automation HIGH 7.8
CVE-2024-9845

Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve lo…

Fix: 2024.4.0.1+
Fix from $1,950 2024-12-11
Security Controls HIGH 7.8
CVE-2024-10251

Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local authenticated attacker to achie…

Fix: 2024.4.1+
Fix from $1,950 2024-12-11
Performance Manager HIGH 7.8
CVE-2024-11597

Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local …

Fix: 2023.3+
Fix from $1,950 2024-12-11
Application Control HIGH 7.8
CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local …

Fix: after 2023.3
Fix from $1,950 2024-12-11
Connect Secure HIGH 8.8
CVE-2024-9844

Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attack…

Fix: 22.7+
Fix from $1,950 2024-12-10