Ivanti: exploited vulnerabilities
- 36exploited vulnerabilities
- 12used by ransomware
- Oct 13, 2026latest one added
- Endpoint Manager Mobile (EPMM) 7
- Pulse Connect Secure 7
- Endpoint Manager (EPM) 4
- Cloud Services Appliance (CSA) 3
- Sentry 2
- Connect Secure, Policy Secure, and ZTA Gateways 2
- Connect Secure and Policy Secure 2
- Connect Secure 1
- Endpoint Manager (EPM) 1
- Virtual Traffic Manager 1
- Cloud Services Appliance 1
- Endpoint Manager Cloud Service Appliance (EPM CSA) 1
- Connect Secure, Policy Secure, and Neurons 1
- Endpoint Manager Mobile (EPMM) and MobileIron Core 1
- MobileIron Multiple Products 1
- Pulse Connect Secure and Pulse Policy Secure 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Oct 13, 2026 | Authentication Bypass by Spoofing | Connect Secure | High 8.6 | 87% |
| Jun 11, 2026 | OS Command Injection | Sentry | Critical 10.0 | 99.9% |
| May 7, 2026 | Improper Input Validation | Endpoint Manager Mobile (EPMM) | High 7.2 | 34% |
| Apr 8, 2026 | Code Injection | Endpoint Manager Mobile (EPMM) | Critical 9.8 | 99% |
| Mar 9, 2026 | Endpoint Manager (EPM) Authentication Bypass | Endpoint Manager (EPM) | High 8.6 | 88% |
| Jan 29, 2026 | Code Injection | Endpoint Manager Mobile (EPMM) | Critical 9.8 | 99% |
| May 19, 2025 | Code Injection | Endpoint Manager Mobile (EPMM) | High 7.2 | 88% |
| May 19, 2025 | Authentication Bypass | Endpoint Manager Mobile (EPMM) | Medium 5.3 | 99.9% |
| Apr 4, 2025 | Stack-Based Buffer Overflow | Connect Secure, Policy Secure, and ZTA Gateways | Critical 9.0 | >99.9% |
| Mar 10, 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Critical 9.8 | 90% |
| Mar 10, 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Critical 9.8 | 91% |
| Mar 10, 2025 | Absolute Path Traversal | Endpoint Manager (EPM) | Critical 9.8 | >99.9% |
| Jan 8, 2025 | Stack-Based Buffer Overflow | Connect Secure, Policy Secure, and ZTA Gateways | Critical 9.0 | >99.9% |
| Oct 9, 2024 | OS Command Injection | Cloud Services Appliance (CSA) | High 7.2 | 58% |
| Oct 9, 2024 | SQL Injection | Cloud Services Appliance (CSA) | Medium 6.5 | 44% |
| Oct 2, 2024 | SQL Injection | Endpoint Manager (EPM) | Critical 9.6 | 99.9% |
| Sep 24, 2024 | Authentication Bypass | Virtual Traffic Manager | Critical 9.8 | >99.9% |
| Sep 19, 2024 | Path Traversal | Cloud Services Appliance (CSA) | Critical 9.4 | 99% |
| Sep 13, 2024 | OS Command Injection | Cloud Services Appliance | High 7.2 | 89% |
| Mar 25, 2024 | Code Injection Vulnerability | Endpoint Manager Cloud Service Appliance (EPM CSA) | Critical 9.8 | 99.1% |
| Jan 31, 2024 | Server-Side Request Forgery (SSRF) | Connect Secure, Policy Secure, and Neurons | High 8.2 | >99.9% |
| Jan 18, 2024 | Authentication Bypass | Endpoint Manager Mobile (EPMM) and MobileIron Core | Critical 10.0 | >99.9% |
| Jan 10, 2024 | Command Injection | Connect Secure and Policy Secure | Critical 9.1 | >99.9% |
| Jan 10, 2024 | Authentication Bypass | Connect Secure and Policy Secure | High 8.2 | >99.9% |
| Aug 22, 2023 | Authentication Bypass | Sentry | Critical 9.8 | >99.9% |
| Jul 31, 2023 | Path Traversal | Endpoint Manager Mobile (EPMM) | High 7.2 | 64% |
| Jul 25, 2023 | Endpoint Manager Mobile Authentication Bypass | Endpoint Manager Mobile (EPMM) | Critical 10.0 | >99.9% |
| Nov 3, 2021 | Unrestricted File Upload | Pulse Connect Secure | High 7.2 | 14% |
| Nov 3, 2021 | Command Injection | Pulse Connect Secure | High 8.8 | 23% |
| Nov 3, 2021 | Collaboration Suite Buffer Overflow | Pulse Connect Secure | High 8.8 | 41% |
| Nov 3, 2021 | Use-After-Free | Pulse Connect Secure | Critical 10.0 | 47% |
| Nov 3, 2021 | Code Execution | Pulse Connect Secure | High 7.2 | 96% |
| Nov 3, 2021 | Code Execution | Pulse Connect Secure | High 7.2 | 91% |
| Nov 3, 2021 | Remote Code Execution | MobileIron Multiple Products | Critical 9.8 | 99.7% |
| Nov 3, 2021 | Pulse Connect Secure and Policy Secure Command Injection | Pulse Connect Secure and Pulse Policy Secure | High 8.0 | 99% |
| Nov 3, 2021 | Arbitrary File Read | Pulse Connect Secure | Critical 9.9 | >99.9% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.