Ivanti: ثغرات مُستغلّة
- 36ثغرة مُستغلّة
- 12تستخدمها برامج الفدية
- 13/10/2026آخر ما أُضيف
- Endpoint Manager Mobile (EPMM) 7
- Pulse Connect Secure 7
- Endpoint Manager (EPM) 4
- Cloud Services Appliance (CSA) 3
- Sentry 2
- Connect Secure, Policy Secure, and ZTA Gateways 2
- Connect Secure and Policy Secure 2
- Connect Secure 1
- Endpoint Manager (EPM) 1
- Virtual Traffic Manager 1
- Cloud Services Appliance 1
- Endpoint Manager Cloud Service Appliance (EPM CSA) 1
- Connect Secure, Policy Secure, and Neurons 1
- Endpoint Manager Mobile (EPMM) and MobileIron Core 1
- MobileIron Multiple Products 1
- Pulse Connect Secure and Pulse Policy Secure 1
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 13/10/2026 | Authentication Bypass by Spoofing | Connect Secure | مرتفع 8.6 | 87% |
| 11/06/2026 | OS Command Injection | Sentry | حرجة 10.0 | 99.9% |
| 07/05/2026 | Improper Input Validation | Endpoint Manager Mobile (EPMM) | مرتفع 7.2 | 34% |
| 08/04/2026 | Code Injection | Endpoint Manager Mobile (EPMM) | حرجة 9.8 | 99% |
| 09/03/2026 | Endpoint Manager (EPM) Authentication Bypass | Endpoint Manager (EPM) | مرتفع 8.6 | 88% |
| 29/01/2026 | Code Injection | Endpoint Manager Mobile (EPMM) | حرجة 9.8 | 99% |
| 19/05/2025 | Code Injection | Endpoint Manager Mobile (EPMM) | مرتفع 7.2 | 88% |
| 19/05/2025 | Authentication Bypass | Endpoint Manager Mobile (EPMM) | متوسطة 5.3 | 99.9% |
| 04/04/2025 | Stack-Based Buffer Overflow | Connect Secure, Policy Secure, and ZTA Gateways | حرجة 9.0 | >99.9% |
| 10/03/2025 | Absolute Path Traversal | Endpoint Manager (EPM) | حرجة 9.8 | 90% |
| 10/03/2025 | Absolute Path Traversal | Endpoint Manager (EPM) | حرجة 9.8 | 91% |
| 10/03/2025 | Absolute Path Traversal | Endpoint Manager (EPM) | حرجة 9.8 | >99.9% |
| 08/01/2025 | Stack-Based Buffer Overflow | Connect Secure, Policy Secure, and ZTA Gateways | حرجة 9.0 | >99.9% |
| 09/10/2024 | OS Command Injection | Cloud Services Appliance (CSA) | مرتفع 7.2 | 58% |
| 09/10/2024 | SQL Injection | Cloud Services Appliance (CSA) | متوسطة 6.5 | 44% |
| 02/10/2024 | SQL Injection | Endpoint Manager (EPM) | حرجة 9.6 | 99.9% |
| 24/09/2024 | Authentication Bypass | Virtual Traffic Manager | حرجة 9.8 | >99.9% |
| 19/09/2024 | Path Traversal | Cloud Services Appliance (CSA) | حرجة 9.4 | 99% |
| 13/09/2024 | OS Command Injection | Cloud Services Appliance | مرتفع 7.2 | 89% |
| 25/03/2024 | Code Injection Vulnerability | Endpoint Manager Cloud Service Appliance (EPM CSA) | حرجة 9.8 | 99.1% |
| 31/01/2024 | Server-Side Request Forgery (SSRF) | Connect Secure, Policy Secure, and Neurons | مرتفع 8.2 | >99.9% |
| 18/01/2024 | Authentication Bypass | Endpoint Manager Mobile (EPMM) and MobileIron Core | حرجة 10.0 | >99.9% |
| 10/01/2024 | Command Injection | Connect Secure and Policy Secure | حرجة 9.1 | >99.9% |
| 10/01/2024 | Authentication Bypass | Connect Secure and Policy Secure | مرتفع 8.2 | >99.9% |
| 22/08/2023 | Authentication Bypass | Sentry | حرجة 9.8 | >99.9% |
| 31/07/2023 | Path Traversal | Endpoint Manager Mobile (EPMM) | مرتفع 7.2 | 64% |
| 25/07/2023 | Endpoint Manager Mobile Authentication Bypass | Endpoint Manager Mobile (EPMM) | حرجة 10.0 | >99.9% |
| 03/11/2021 | Unrestricted File Upload | Pulse Connect Secure | مرتفع 7.2 | 14% |
| 03/11/2021 | Command Injection | Pulse Connect Secure | مرتفع 8.8 | 23% |
| 03/11/2021 | Collaboration Suite Buffer Overflow | Pulse Connect Secure | مرتفع 8.8 | 41% |
| 03/11/2021 | Use-After-Free | Pulse Connect Secure | حرجة 10.0 | 47% |
| 03/11/2021 | Code Execution | Pulse Connect Secure | مرتفع 7.2 | 96% |
| 03/11/2021 | Code Execution | Pulse Connect Secure | مرتفع 7.2 | 91% |
| 03/11/2021 | Remote Code Execution | MobileIron Multiple Products | حرجة 9.8 | 99.7% |
| 03/11/2021 | Pulse Connect Secure and Policy Secure Command Injection | Pulse Connect Secure and Pulse Policy Secure | مرتفع 8.0 | 99% |
| 03/11/2021 | Arbitrary File Read | Pulse Connect Secure | حرجة 9.9 | >99.9% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.