Ivanti: vulnerabilidades exploradas
- 36vulnerabilidades exploradas
- 12usada por ransomware
- 13 de out. de 2026a mais recente
- Endpoint Manager Mobile (EPMM) 7
- Pulse Connect Secure 7
- Endpoint Manager (EPM) 4
- Cloud Services Appliance (CSA) 3
- Sentry 2
- Connect Secure, Policy Secure, and ZTA Gateways 2
- Connect Secure and Policy Secure 2
- Connect Secure 1
- Endpoint Manager (EPM) 1
- Virtual Traffic Manager 1
- Cloud Services Appliance 1
- Endpoint Manager Cloud Service Appliance (EPM CSA) 1
- Connect Secure, Policy Secure, and Neurons 1
- Endpoint Manager Mobile (EPMM) and MobileIron Core 1
- MobileIron Multiple Products 1
- Pulse Connect Secure and Pulse Policy Secure 1
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 13 de out. de 2026 | Authentication Bypass by Spoofing | Connect Secure | Alto 8,6 | 87% |
| 11 de jun. de 2026 | OS Command Injection | Sentry | Crítica 10,0 | 99,9% |
| 7 de mai. de 2026 | Improper Input Validation | Endpoint Manager Mobile (EPMM) | Alto 7,2 | 34% |
| 8 de abr. de 2026 | Code Injection | Endpoint Manager Mobile (EPMM) | Crítica 9,8 | 99% |
| 9 de mar. de 2026 | Endpoint Manager (EPM) Authentication Bypass | Endpoint Manager (EPM) | Alto 8,6 | 88% |
| 29 de jan. de 2026 | Code Injection | Endpoint Manager Mobile (EPMM) | Crítica 9,8 | 99% |
| 19 de mai. de 2025 | Code Injection | Endpoint Manager Mobile (EPMM) | Alto 7,2 | 88% |
| 19 de mai. de 2025 | Authentication Bypass | Endpoint Manager Mobile (EPMM) | Média 5,3 | 99,9% |
| 4 de abr. de 2025 | Stack-Based Buffer Overflow | Connect Secure, Policy Secure, and ZTA Gateways | Crítica 9,0 | >99,9% |
| 10 de mar. de 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Crítica 9,8 | 90% |
| 10 de mar. de 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Crítica 9,8 | 91% |
| 10 de mar. de 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Crítica 9,8 | >99,9% |
| 8 de jan. de 2025 | Stack-Based Buffer Overflow | Connect Secure, Policy Secure, and ZTA Gateways | Crítica 9,0 | >99,9% |
| 9 de out. de 2024 | OS Command Injection | Cloud Services Appliance (CSA) | Alto 7,2 | 58% |
| 9 de out. de 2024 | SQL Injection | Cloud Services Appliance (CSA) | Média 6,5 | 44% |
| 2 de out. de 2024 | SQL Injection | Endpoint Manager (EPM) | Crítica 9,6 | 99,9% |
| 24 de set. de 2024 | Authentication Bypass | Virtual Traffic Manager | Crítica 9,8 | >99,9% |
| 19 de set. de 2024 | Path Traversal | Cloud Services Appliance (CSA) | Crítica 9,4 | 99% |
| 13 de set. de 2024 | OS Command Injection | Cloud Services Appliance | Alto 7,2 | 89% |
| 25 de mar. de 2024 | Code Injection Vulnerability | Endpoint Manager Cloud Service Appliance (EPM CSA) | Crítica 9,8 | 99,1% |
| 31 de jan. de 2024 | Server-Side Request Forgery (SSRF) | Connect Secure, Policy Secure, and Neurons | Alto 8,2 | >99,9% |
| 18 de jan. de 2024 | Authentication Bypass | Endpoint Manager Mobile (EPMM) and MobileIron Core | Crítica 10,0 | >99,9% |
| 10 de jan. de 2024 | Command Injection | Connect Secure and Policy Secure | Crítica 9,1 | >99,9% |
| 10 de jan. de 2024 | Authentication Bypass | Connect Secure and Policy Secure | Alto 8,2 | >99,9% |
| 22 de ago. de 2023 | Authentication Bypass | Sentry | Crítica 9,8 | >99,9% |
| 31 de jul. de 2023 | Path Traversal | Endpoint Manager Mobile (EPMM) | Alto 7,2 | 64% |
| 25 de jul. de 2023 | Endpoint Manager Mobile Authentication Bypass | Endpoint Manager Mobile (EPMM) | Crítica 10,0 | >99,9% |
| 3 de nov. de 2021 | Unrestricted File Upload | Pulse Connect Secure | Alto 7,2 | 14% |
| 3 de nov. de 2021 | Command Injection | Pulse Connect Secure | Alto 8,8 | 23% |
| 3 de nov. de 2021 | Collaboration Suite Buffer Overflow | Pulse Connect Secure | Alto 8,8 | 41% |
| 3 de nov. de 2021 | Use-After-Free | Pulse Connect Secure | Crítica 10,0 | 47% |
| 3 de nov. de 2021 | Code Execution | Pulse Connect Secure | Alto 7,2 | 96% |
| 3 de nov. de 2021 | Code Execution | Pulse Connect Secure | Alto 7,2 | 91% |
| 3 de nov. de 2021 | Remote Code Execution | MobileIron Multiple Products | Crítica 9,8 | 99,7% |
| 3 de nov. de 2021 | Pulse Connect Secure and Policy Secure Command Injection | Pulse Connect Secure and Pulse Policy Secure | Alto 8,0 | 99% |
| 3 de nov. de 2021 | Arbitrary File Read | Pulse Connect Secure | Crítica 9,9 | >99,9% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.