Browse CVEs

HIGH 7.8 CVE-2024-13172 Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote … Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2024-13169 An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticat… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2024-13171EPSS 18% Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13168 An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13170 An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2024-13163EPSS 9% Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remot… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.8 CVE-2024-13164 An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authent… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13165 An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13166 An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13167 An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthent… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13159 KEVEPSS 100% Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthen… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13160 KEVEPSS 91% Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthen… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13161 KEVEPSS 90% Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthen… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.2 CVE-2024-13158 An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remot… Endpoint Manager 2024+ Fix from $1,9502025-01-14 HIGH 7.2 CVE-2024-13162EPSS 64% SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated atta… Endpoint Manager 2022+ Fix from $1,9502025-01-14 CRITICAL 9.8 CVE-2024-13179EPSS 62% Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. Avalanche 6.4.7+ Fix from $2,3002025-01-14 CRITICAL 9.8 CVE-2024-13181EPSS 32% Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incompl… Avalanche 6.4.6+ Fix from $2,3002025-01-14 HIGH 7.5 CVE-2024-10811 Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthen… Endpoint Manager 2022+ Fix from $1,9502025-01-14 HIGH 7.5 CVE-2024-13180EPSS 28% Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses in… Avalanche 6.4.7+ Fix from $1,9502025-01-14 HIGH 7.0 CVE-2024-10630 A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocki… Application Control 2023.3+ Fix from $1,9502025-01-14 CRITICAL 9.0 CVE-2025-0282 KEVEPSS 100% A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for … Connect Secure Mitigation only Fix from $2,3002025-01-08 HIGH 7.0 CVE-2025-0283EPSS 17% A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for … Connect Secure 9.1 / 22.7+ Fix from $1,9502025-01-08 HIGH 7.5 CVE-2024-37401 An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service. Connect Secure 22.7+ Fix from $1,9502024-12-12 HIGH 7.5 CVE-2024-37377 A heap-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to cause a denial of … Connect Secure 22.7+ Fix from $1,9502024-12-12 HIGH 7.8 CVE-2024-8496 Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to ach… Workspace Control 10.18.40.0+ Fix from $1,9502024-12-11 HIGH 7.8 CVE-2024-9845 Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve lo… Automation 2024.4.0.1+ Fix from $1,9502024-12-11 HIGH 7.8 CVE-2024-10251 Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local authenticated attacker to achie… Security Controls 2024.4.1+ Fix from $1,9502024-12-11 HIGH 7.8 CVE-2024-11597 Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local … Performance Manager 2023.3+ Fix from $1,9502024-12-11 HIGH 7.8 CVE-2024-11598 Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local … Application Control after 2023.3 Fix from $1,9502024-12-11 HIGH 8.8 CVE-2024-9844 Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attack… Connect Secure 22.7+ Fix from $1,9502024-12-10