Patchfirst
Patchfirst

Vendor

Ivanti

39 of 74 Ivanti CVEs in Patchfirst (53%) are in of vulnerabilities exploited in the wild, 12 of them used by ransomware.

CVEs
74
In CISA KEV
3953%
Known ransomware use
12
Median days to KEV
34
from publication
Latest KEV listing
30 Oct 2026
Watch Ivanti Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Pulse Connect Secure In KEV: 8 CVEs: 8
  • Endpoint Manager Mobile (EPMM) In KEV: 7 CVEs: 7
  • Endpoint Manager (EPM) In KEV: 5 CVEs: 5
  • Connect Secure In KEV: 3 CVEs: 6
  • Cloud Services Appliance (CSA) In KEV: 3 CVEs: 3
  • Sentry In KEV: 2 CVEs: 3
  • Connect Secure and Policy Secure In KEV: 2 CVEs: 2
  • Connect Secure, Policy Secure, and ZTA Gateways In KEV: 2 CVEs: 2
  • Cloud Services Appliance In KEV: 1 CVEs: 1
  • Connect Secure, Policy Secure, and Neurons In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with Ivanti CVEs
Open in ATT&CK Navigator

Counts are Ivanti CVEs linked to the technique. Each link’s provenance is on the CVE page.

Ivanti CVEs

74 CVEs, by priority
  1. CVE-2019-11510Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
    Ivanti · Pulse Connect SecureKEVRansomwarePublic exploitCritical · 10.0T1133External Remote ServicesT1059Command and Scripting Interpreter+2 more · 6 reports
    >99.9%Top 0.01%
    90.0priority
  2. CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    98.7%Top 0.08%
    88.7priority
  3. CVE-2024-21887Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
    Ivanti · Connect Secure and Policy SecureKEVRansomwarePublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+2 more · 4 reports
    >99.9%Top 0.01%
    88.4priority
  4. CVE-2023-46805Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
    Ivanti · Connect Secure and Policy SecureKEVRansomwarePublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1078Valid Accounts+2 more · 4 reports
    >99.9%Top 0.02%
    87.7priority
  5. CVE-2025-0282Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
    Ivanti · Connect Secure, Policy Secure, and ZTA GatewaysKEVRansomwarePublic exploitCritical · 9.0T1595Active ScanningT1190Exploit Public-Facing Application+4 more · 2 reports
    >99.9%Top 0.02%
    85.4priority
  6. CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    98.6%Top 0.08%
    84.8priority
  7. CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
    Ivanti · Connect Secure, Policy Secure, and ZTA GatewaysKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    >99.9%Top 0.02%
    83.7priority
  8. CVE-2021-22893Ivanti Pulse Connect Secure Use-After-Free Vulnerability
    Ivanti · Pulse Connect SecureKEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    47.2%Top 1.2%
    83.6priority
  9. CVE-2020-8260Ivanti Pulse Connect Secure Code Execution Vulnerability
    Ivanti · Pulse Connect SecureKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    96.5%Top 0.12%
    81.9priority
  10. CVE-2019-11539Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
    Ivanti · Pulse Connect Secure and Pulse Policy SecureKEVRansomwarePublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    98.5%Top 0.08%
    81.9priority
  11. CVE-2023-38035Ivanti Sentry Authentication Bypass Vulnerability
    Ivanti · SentryKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+6 more
    >99.9%Top 0.03%
    79.9priority
  12. CVE-2023-35082Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron CoreKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    >99.9%Top 0.01%
    79.9priority
  13. CVE-2023-35078Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1136Create Account+1 more
    >99.9%Top 0.01%
    79.9priority
  14. CVE-2021-44529Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
    Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1195.002Compromise Software Supply Chain
    99.1%Top 0.07%
    79.8priority
  15. CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
    Ivanti · Connect SecureKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    86.8%Top 0.26%
    79.0priority
  16. CVE-2024-21893Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
    Ivanti · Connect Secure, Policy Secure, and NeuronsKEVRansomwarePublic exploitHigh · 8.2T1190Exploit Public-Facing ApplicationT1078Valid Accounts+2 more
    >99.9%Top 0.01%
    78.7priority
  17. CVE-2025-0283A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version…
    Ivanti · Connect SecureHigh · 7.02 reports
    17.5%Top 2.9%
    78.5priority
  18. CVE-2020-8243Ivanti Pulse Connect Secure Code Execution Vulnerability
    Ivanti · Pulse Connect SecureKEVHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    90.8%Top 0.2%
    76.9priority
  19. CVE-2026-10520Ivanti Sentry OS Command Injection Vulnerability
    Ivanti · SentryKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.9%Top 0.03%
    75.0priority
  20. CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
    Ivanti · Endpoint Manager (EPM)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    88.3%Top 0.23%
    73.2priority
  21. CVE-2024-7593Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
    Ivanti · Virtual Traffic ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    >99.9%Top 0.01%
    69.9priority
  22. CVE-2020-15505Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
    Ivanti · MobileIron Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.7%Top 0.05%
    69.9priority
  23. CVE-2024-8963Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
    Ivanti · Cloud Services Appliance (CSA)KEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1005Data from Local System
    98.6%Top 0.08%
    69.4priority
  24. CVE-2024-29824Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
    Ivanti · Endpoint Manager (EPM)KEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    99.9%Top 0.03%
    69.2priority
  25. CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVPublic exploitHigh · 8.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    88.0%Top 0.24%
    69.1priority
  26. CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    99.9%Top 0.03%
    68.2priority
  27. CVE-2024-13161Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
    Ivanti · Endpoint Manager (EPM)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1558Steal or Forge Kerberos Tickets+2 more
    89.8%Top 0.21%
    68.2priority
  28. CVE-2024-13160Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
    Ivanti · Endpoint Manager (EPM)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1558Steal or Forge Kerberos Tickets+2 more
    91.0%Top 0.19%
    68.2priority
  29. CVE-2024-13159Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
    Ivanti · Endpoint Manager (EPM)KEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1558Steal or Forge Kerberos Tickets+2 more
    >99.9%Top 0.01%
    68.2priority
  30. CVE-2024-22024An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy…
    Ivanti · ICSPublic exploitHigh · 8.3
    94.7%Top 0.14%
    68.1priority
  31. CVE-2024-8190Ivanti Cloud Services Appliance OS Command Injection Vulnerability
    Ivanti · Cloud Services ApplianceKEVPublic exploitHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    88.5%Top 0.23%
    68.0priority
  32. CVE-2021-22894Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
    Ivanti · Pulse Connect SecureKEVHigh · 8.8T1078Valid AccountsT1059Command and Scripting Interpreter1 report
    41.3%Top 1.3%
    67.8priority
  33. CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVHigh · 7.2T1078Valid AccountsT1059Command and Scripting Interpreter
    34.5%Top 1.6%
    67.7priority
  34. CVE-2020-8218Pulse Connect Secure Code Injection Vulnerability
    Pulse Secure · Pulse Connect SecureKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    32.3%Top 1.7%
    67.7priority
  35. CVE-2021-22899Ivanti Pulse Connect Secure Command Injection Vulnerability
    Ivanti · Pulse Connect SecureKEVHigh · 8.8T1078Valid Accounts1 report
    22.9%Top 2.3%
    67.6priority
  36. CVE-2023-32563An unauthenticated attacker could achieve the code execution through a RemoteControl server
    Ivanti · AvalanchePublic exploitHigh · 8.8
    89.1%Top 0.22%
    66.8priority
  37. CVE-2021-22900Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability
    Ivanti · Pulse Connect SecureKEVHigh · 7.2T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1 report
    14.1%Top 3.4%
    66.2priority
  38. CVE-2024-38653XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on…
    Ivanti · AvalanchePublic exploitHigh · 8.2
    92.0%Top 0.18%
    65.7priority
  39. CVE-2024-21888A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure…
    Ivanti · ICSHigh · 8.8
    85.4%Top 0.28%
    64.1priority
  40. CVE-2024-9380Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
    Ivanti · Cloud Services Appliance (CSA)KEVHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    58.3%Top 0.91%
    62.9priority
  41. CVE-2023-35081Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
    Ivanti · Endpoint Manager Mobile (EPMM)KEVHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    63.6%Top 0.79%
    62.9priority
  42. CVE-2024-9379Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
    Ivanti · Cloud Services Appliance (CSA)KEVHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    44.3%Top 1.2%
    62.8priority
  43. CVE-2024-21894A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows…
    Ivanti · Connect SecureHigh · 8.2
    19.0%Top 2.7%
    62.5priority
  44. CVE-2024-9381Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to…
    Ivanti · CSA (Cloud Services Appliance)High · 7.2
    15.6%Top 3.2%
    62.2priority
  45. CVE-2023-41724A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute…
    Ivanti · SentryCritical · 9.6
    12.8%Top 3.7%
    61.0priority
  46. CVE-2023-46808An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes…
    Ivanti · ITSMCritical · 9.9
    2.0%Top 19%
    58.1priority
  47. CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
    Ivanti · Connect SecureKEVHigh · 7.0T1068Exploitation for Privilege EscalationT1548Abuse Elevation Control Mechanism
    0.3%Top 75%
    57.0priority
  48. CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
    Ivanti · Connect SecureKEVT1190Exploit Public-Facing ApplicationT1105Ingress Tool Transfer
    No EPSS
    45.0priority
  49. CVE-2023-32560An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service…
    Ivanti · AvalanchePublic exploitHigh · 8.8
    99.4%Top 0.06%
    31.8priority
  50. CVE-2024-37404Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy…
    Ivanti · Connect SecurePublic exploitCritical · 9.1
    71.0%Top 0.6%
    31.3priority
  51. CVE-2022-36974This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche…
    Ivanti · AvalancheCritical · 9.8
    84.5%Top 0.3%
    26.8priority
  52. CVE-2024-29826An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
    Ivanti · EPMCritical · 9.6
    99.9%Top 0.03%
    26.7priority
  53. CVE-2024-29825An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
    Ivanti · EPMCritical · 9.6
    99.9%Top 0.04%
    26.7priority
  54. CVE-2024-29823An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
    Ivanti · EPMCritical · 9.6
    99.9%Top 0.04%
    26.7priority
  55. CVE-2024-29827An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
    Ivanti · EPMCritical · 9.6
    71.7%Top 0.58%
    26.6priority
  56. CVE-2024-29822An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
    Ivanti · EPMCritical · 9.6
    64.4%Top 0.77%
    26.6priority
  57. CVE-2022-36980This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche…
    Ivanti · AvalancheCritical · 9.4
    82.4%Top 0.34%
    26.5priority
  58. CVE-2022-36981This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche…
    Ivanti · AvalancheHigh · 8.8
    83.4%Top 0.32%
    26.1priority
  59. CVE-2024-24994A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…
    Ivanti · AvalancheHigh · 8.8
    68.1%Top 0.67%
    26.0priority
  60. CVE-2024-24992A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…
    Ivanti · AvalancheHigh · 8.8
    70.9%Top 0.6%
    26.0priority
  61. CVE-2024-23535A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…
    Ivanti · AvalancheHigh · 8.8
    68.1%Top 0.67%
    26.0priority
  62. CVE-2023-46263An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that…
    Ivanti · AvalancheHigh · 7.2
    81.9%Top 0.35%
    25.7priority
  63. CVE-2024-37397An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024…
    Ivanti · EPMHigh · 8.2
    59.3%Top 0.88%
    25.6priority
  64. CVE-2023-46262An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF)…
    Ivanti · AvalancheHigh · 7.5
    82.8%Top 0.33%
    25.2priority
  65. CVE-2024-47011Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive…
    Ivanti · AvalancheHigh · 7.5
    56.3%Top 0.95%
    25.1priority
  66. CVE-2021-22962An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a…
    Ivanti · AvalancheHigh · 7.3
    91.0%Top 0.19%
    25.1priority
  67. CVE-2024-13179Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…
    Ivanti · AvalancheHigh · 7.3
    63.8%Top 0.78%
    25.0priority
  68. CVE-2023-46264An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that…
    Ivanti · AvalancheHigh · 7.2
    90.2%Top 0.2%
    25.0priority
  69. CVE-2024-13162SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update…
    Ivanti · Endpoint ManagerHigh · 7.2
    65.0%Top 0.75%
    24.9priority
  70. CVE-2024-34781SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update…
    Ivanti · EPMHigh · 7.2
    68.5%Top 0.67%
    24.9priority
  71. CVE-2024-29848An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated…
    Ivanti · AvalancheHigh · 7.2
    64.4%Top 0.77%
    24.9priority
  72. CVE-2022-36982This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche…
    Ivanti · AvalancheMedium · 6.5
    73.8%Top 0.52%
    24.4priority
  73. CVE-2026-109412An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak…
    Ivanti · Neurons Patch for IntuneCritical · 9.9
    0.9%Top 41%
    20.8priority
  74. CVE-2026-106042An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…
    Ivanti · XtractionCritical · 9.9
    0.8%Top 44%
    20.3priority
↑ ↓ chooseEnter openEsc close