Ivanti vulnerabilities30 known to be exploited.
Ivanti has 404 published vulnerabilities across 35 products in our catalogue. 30 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Avalanche, with 116. If you run Ivanti software, patch the exploited flaws first.
The most recent Ivanti flaw added to the known-exploited list is CVE-2025-4428, on 19 May 2025. We keep watching the known-exploited list.
Which Ivanti products have the most vulnerabilities?
Avalanche leads with 116 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Ivanti vulnerabilities are being exploited?
30 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.2Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests.
- 5.3Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) contains an authentication bypass vulnerability in the API component that allows an attacker to access protected resources without proper credentials via crafted API requests.
- 9.0Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Ivanti Connect Secure, Policy Secure, and ZTA Gateways contains a stack-based buffer overflow vulnerability that allows a remote unauthenticated attacker to achieve remote code execution.
- 9.8Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
- 9.8Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
- 9.8Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.
- 9.0Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution.
- 7.2Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the...
Which Ivanti flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading...
- >99%
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted...
- >99%
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
- >99%
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
- >99%
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute...
- >99%
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
- >99%
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
- >99%
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allows a remote unauthenticated attacker...
- >99%
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote...
- >99%
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
All Ivanti products we track.
34 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Avalancheavalanche116 vulnerabilities32 versions
- Connect Secureconnect_secure111 vulnerabilities18 versions
- Endpoint Managerendpoint_manager86 vulnerabilities13 versions
- Policy Securepolicy_secure60 vulnerabilities9 versions
- Endpoint Manager Mobileendpoint_manager_mobile19 vulnerabilities70 versions
- Workspace Controlworkspace_control19 vulnerabilities26 versions
- Zero Trust Access Gatewayzero_trust_access_gateway17 vulnerabilities4 versions
- Neurons for Secure Accessneurons_for_secure_access15 vulnerabilities10 versions
- Secure Access Clientsecure_access_client14 vulnerabilities6 versions
- Landesk Management Suitelandesk_management_suite6 vulnerabilities3 versions
- Neurons for Zero-Trust Accessneurons_for_zero-trust_access6 vulnerabilities7 versions
- Cloud Services Appliancecloud_services_appliance5 vulnerabilities5 versions
- Endpoint Manager Cloud Services Applianceendpoint_manager_cloud_services_appliance5 vulnerabilities2 versions
- Incapptic Connectincapptic_connect3 vulnerabilities14 versions
- Neurons for Itsmneurons_for_itsm3 vulnerabilities9 versions
- Automationautomation2 vulnerabilities25 versions
- Mobileironmobileiron2 vulnerabilities3 versions
- Application Controlapplication_control1 vulnerability3 versions
- Desktop & Server Managementdesktop_\&_server_management1 vulnerability7 versions
- Desktop&server Managementdesktop\&server_management1 vulnerability2 versions
- Docs@workdocs\@work1 vulnerability11 versions
- Dsm Netinstdsm_netinst1 vulnerability1 version
- Endpoint Securityendpoint_security1 vulnerability1 version
- Mobileiron Sentrymobileiron_sentry1 vulnerability1 version
This directory lists the 34 Ivanti products with at least one tracked version, of 35 in our catalogue.
Running Ivanti? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Ivanti Endpoint Manager Mobile (EPMM) contains a code injection vulnerability in the API component that allows an authenticated attacker to remotely execute arbitrary code via crafted API requests. This vulnerability results from an insecure implementation of the Hibernate Validator open-source library, as represented by CVE-2025-35036.
- Matched to
- Endpoint Manager on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 404 published vulnerabilities across 35 products and 332 versions from Ivanti. The most recent Ivanti flaw added to the known-exploited list is CVE-2025-4428, on 19 May 2025.
30 Ivanti vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2025-4428, CVE-2025-4427 and CVE-2025-22457. The full list is on this page.
Avalanche, with 116 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Ivanti products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.