Ivanti: ευπάθειες που αξιοποιούνται
- 36ευπάθειες που αξιοποιούνται
- 12χρησιμοποιείται από ransomware
- 13 Οκτ 2026η πιο πρόσφατη προσθήκη
- Endpoint Manager Mobile (EPMM) 7
- Pulse Connect Secure 7
- Endpoint Manager (EPM) 4
- Cloud Services Appliance (CSA) 3
- Sentry 2
- Connect Secure, Policy Secure, and ZTA Gateways 2
- Connect Secure and Policy Secure 2
- Connect Secure 1
- Endpoint Manager (EPM) 1
- Virtual Traffic Manager 1
- Cloud Services Appliance 1
- Endpoint Manager Cloud Service Appliance (EPM CSA) 1
- Connect Secure, Policy Secure, and Neurons 1
- Endpoint Manager Mobile (EPMM) and MobileIron Core 1
- MobileIron Multiple Products 1
- Pulse Connect Secure and Pulse Policy Secure 1
| Προστέθηκε | Ευπάθεια | Προϊόν | Σοβαρότητα | Πιθανότητα επίθεσης |
|---|---|---|---|---|
| 13 Οκτ 2026 | Authentication Bypass by Spoofing | Connect Secure | Υψηλή 8,6 | 87% |
| 11 Ιουν 2026 | OS Command Injection | Sentry | Κρίσιμη 10,0 | 99,9% |
| 7 Μαΐ 2026 | Improper Input Validation | Endpoint Manager Mobile (EPMM) | Υψηλή 7,2 | 34% |
| 8 Απρ 2026 | Code Injection | Endpoint Manager Mobile (EPMM) | Κρίσιμη 9,8 | 99% |
| 9 Μαρ 2026 | Endpoint Manager (EPM) Authentication Bypass | Endpoint Manager (EPM) | Υψηλή 8,6 | 88% |
| 29 Ιαν 2026 | Code Injection | Endpoint Manager Mobile (EPMM) | Κρίσιμη 9,8 | 99% |
| 19 Μαΐ 2025 | Code Injection | Endpoint Manager Mobile (EPMM) | Υψηλή 7,2 | 88% |
| 19 Μαΐ 2025 | Authentication Bypass | Endpoint Manager Mobile (EPMM) | Μέτρια 5,3 | 99,9% |
| 4 Απρ 2025 | Stack-Based Buffer Overflow | Connect Secure, Policy Secure, and ZTA Gateways | Κρίσιμη 9,0 | >99,9% |
| 10 Μαρ 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Κρίσιμη 9,8 | 90% |
| 10 Μαρ 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Κρίσιμη 9,8 | 91% |
| 10 Μαρ 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Κρίσιμη 9,8 | >99,9% |
| 8 Ιαν 2025 | Stack-Based Buffer Overflow | Connect Secure, Policy Secure, and ZTA Gateways | Κρίσιμη 9,0 | >99,9% |
| 9 Οκτ 2024 | OS Command Injection | Cloud Services Appliance (CSA) | Υψηλή 7,2 | 58% |
| 9 Οκτ 2024 | SQL Injection | Cloud Services Appliance (CSA) | Μέτρια 6,5 | 44% |
| 2 Οκτ 2024 | SQL Injection | Endpoint Manager (EPM) | Κρίσιμη 9,6 | 99,9% |
| 24 Σεπ 2024 | Authentication Bypass | Virtual Traffic Manager | Κρίσιμη 9,8 | >99,9% |
| 19 Σεπ 2024 | Path Traversal | Cloud Services Appliance (CSA) | Κρίσιμη 9,4 | 99% |
| 13 Σεπ 2024 | OS Command Injection | Cloud Services Appliance | Υψηλή 7,2 | 89% |
| 25 Μαρ 2024 | Code Injection Vulnerability | Endpoint Manager Cloud Service Appliance (EPM CSA) | Κρίσιμη 9,8 | 99,1% |
| 31 Ιαν 2024 | Server-Side Request Forgery (SSRF) | Connect Secure, Policy Secure, and Neurons | Υψηλή 8,2 | >99,9% |
| 18 Ιαν 2024 | Authentication Bypass | Endpoint Manager Mobile (EPMM) and MobileIron Core | Κρίσιμη 10,0 | >99,9% |
| 10 Ιαν 2024 | Command Injection | Connect Secure and Policy Secure | Κρίσιμη 9,1 | >99,9% |
| 10 Ιαν 2024 | Authentication Bypass | Connect Secure and Policy Secure | Υψηλή 8,2 | >99,9% |
| 22 Αυγ 2023 | Authentication Bypass | Sentry | Κρίσιμη 9,8 | >99,9% |
| 31 Ιουλ 2023 | Path Traversal | Endpoint Manager Mobile (EPMM) | Υψηλή 7,2 | 64% |
| 25 Ιουλ 2023 | Endpoint Manager Mobile Authentication Bypass | Endpoint Manager Mobile (EPMM) | Κρίσιμη 10,0 | >99,9% |
| 3 Νοε 2021 | Unrestricted File Upload | Pulse Connect Secure | Υψηλή 7,2 | 14% |
| 3 Νοε 2021 | Command Injection | Pulse Connect Secure | Υψηλή 8,8 | 23% |
| 3 Νοε 2021 | Collaboration Suite Buffer Overflow | Pulse Connect Secure | Υψηλή 8,8 | 41% |
| 3 Νοε 2021 | Use-After-Free | Pulse Connect Secure | Κρίσιμη 10,0 | 47% |
| 3 Νοε 2021 | Code Execution | Pulse Connect Secure | Υψηλή 7,2 | 96% |
| 3 Νοε 2021 | Code Execution | Pulse Connect Secure | Υψηλή 7,2 | 91% |
| 3 Νοε 2021 | Remote Code Execution | MobileIron Multiple Products | Κρίσιμη 9,8 | 99,7% |
| 3 Νοε 2021 | Pulse Connect Secure and Policy Secure Command Injection | Pulse Connect Secure and Pulse Policy Secure | Υψηλή 8,0 | 99% |
| 3 Νοε 2021 | Arbitrary File Read | Pulse Connect Secure | Κρίσιμη 9,9 | >99,9% |
Πηγές: Known Exploited Vulnerabilities (CISA, δημόσιος τομέας), CVE records (cve.org) και EPSS (FIRST). Η πιθανότητα επίθεσης είναι η εκτίμηση EPSS ότι κάποιος θα προσπαθήσει να εκμεταλλευτεί το κενό τις επόμενες 30 ημέρες.