Skip to content
Fencer Intel

All · Ivanti

Newest first, late arrivals on top. Also a feed.

  1. 9.6
    CVE-2024-29825 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the sa…
    Ivanti
    EPSS 99.9% chance of exploitation in 30 days, percentile 99.9%
  2. 6.7
    CVE-2023-46806 An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege…
    Ivanti
  3. 6.7
    CVE-2023-46807 An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access o…
    Ivanti
    EPSS 1.1% chance of exploitation in 30 days, percentile 64%
  4. 6.7
    CVE-2024-22026 A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execu…
    Ivanti
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  5. 7.5
    CVE-2024-29205 An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti…
    Ivanti
    EPSS 1.6% chance of exploitation in 30 days, percentile 75%
  6. 8.2
    CVE-2024-21894 A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated ma…
    Ivanti
    EPSS 19.0% chance of exploitation in 30 days, percentile 97%
  7. 8.2
    CVE-2024-22053 A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated mal…
    Ivanti
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  8. 7.5
    CVE-2024-22052 A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthe…
    Ivanti
    EPSS 3.8% chance of exploitation in 30 days, percentile 90%
  9. 5.3
    CVE-2024-22023 An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unau…
    Ivanti
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  10. 8.3
    CVE-2024-22024 An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) an…
    Ivanti
    EPSS 94.7% chance of exploitation in 30 days, percentile 99.8%
  11. 8.2
    CVE-2024-21893 A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x)…
    Ivanti
    kev+ ransomware 1 public exploit EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  12. 8.8
    CVE-2024-21888 A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a us…
    Ivanti
    EPSS 85.4% chance of exploitation in 30 days, percentile 99.7%
  13. 9.1
    CVE-2024-21887 A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an aut…
    Ivanti
    kev+ ransomware 2 public exploits EPSS 100.0% chance of exploitation in 30 days, percentile 100%
  14. 8.2
    CVE-2023-46805 An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to ac…
    Ivanti
    kev+ ransomware 1 public exploit EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  15. 9.6
    CVE-2023-39336 An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker with access to the int…
    Ivanti
    EPSS 10.0% chance of exploitation in 30 days, percentile 95%
  16. 7.5
    CVE-2023-39340 A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead t…
    Ivanti
    EPSS 2.4% chance of exploitation in 30 days, percentile 84%
  17. 7.2
    CVE-2023-41719 A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a s…
    Ivanti
    EPSS 3.4% chance of exploitation in 30 days, percentile 88%
  18. 7.0
    CVE-2023-41720 A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure…
    Ivanti
  19. 9.1
    CVE-2023-39337 A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier…
    Ivanti
    EPSS 2.9% chance of exploitation in 30 days, percentile 87%
  20. 9.8
    CVE-2023-39335 A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to im…
    Ivanti
    EPSS 3.5% chance of exploitation in 30 days, percentile 89%
  21. 6.5
    CVE-2023-35083 Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all pr…
    Ivanti
    EPSS 1.6% chance of exploitation in 30 days, percentile 76%
  22. 9.8
    CVE-2023-35084 Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previou…
    Ivanti
    EPSS 3.8% chance of exploitation in 30 days, percentile 90%
  23. 6.5
    CVE-2023-38344 An issue was discovered in Ivanti Endpoint Manager before 2022 SU4.
    Ivanti
    EPSS 1.5% chance of exploitation in 30 days, percentile 75%
  24. 7.5
    CVE-2023-38343 An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022 SU4.
    Ivanti
    EPSS 2.1% chance of exploitation in 30 days, percentile 82%
  25. 10.0
    CVE-2023-35082 An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or reso…
    Ivanti
    kev+ ransomware EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  26. 7.2
    CVE-2023-35081 A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticat…
    Ivanti
    kev EPSS 63.6% chance of exploitation in 30 days, percentile 99.2%
  27. 10.0
    CVE-2023-35078 An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the appl…
    Ivanti
    kev+ ransomware EPSS 100.0% chance of exploitation in 30 days, percentile 99.9%
  28. 8.1
    CVE-2023-35077 An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash.
    Ivanti
    EPSS 2.2% chance of exploitation in 30 days, percentile 82%
  29. 9.8
    CVE-2023-28323 A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights.
    Ivanti
    EPSS 3.1% chance of exploitation in 30 days, percentile 88%
  30. 8.2
    CVE-2023-28324 A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote…
    Ivanti
    1 public exploit EPSS 12.9% chance of exploitation in 30 days, percentile 96%