Ivanti: 36 known exploited vulnerabilities

CVE-2026-104935 – Ivanti Connect Secure (added 2026-10-13)
CVE-2026-10520 – Ivanti Sentry (added 2026-06-11)
CVE-2026-6973 – Ivanti Endpoint Manager Mobile (EPMM) (added 2026-05-07)
CVE-2026-1340 – Ivanti Endpoint Manager Mobile (EPMM) (added 2026-04-08)
CVE-2026-1603 – Ivanti Endpoint Manager (EPM) (added 2026-03-09)
CVE-2026-1281 – Ivanti Endpoint Manager Mobile (EPMM) (added 2026-01-29)
CVE-2025-4428 – Ivanti Endpoint Manager Mobile (EPMM) (added 2025-05-19)
CVE-2025-4427 – Ivanti Endpoint Manager Mobile (EPMM) (added 2025-05-19)
CVE-2025-22457 – Ivanti Connect Secure, Policy Secure, and ZTA Gateways (added 2025-04-04)
CVE-2024-13161 – Ivanti Endpoint Manager (EPM) (added 2025-03-10)
CVE-2024-13160 – Ivanti Endpoint Manager (EPM) (added 2025-03-10)
CVE-2024-13159 – Ivanti Endpoint Manager (EPM) (added 2025-03-10)
CVE-2025-0282 – Ivanti Connect Secure, Policy Secure, and ZTA Gateways (added 2025-01-08)
CVE-2024-9380 – Ivanti Cloud Services Appliance (CSA) (added 2024-10-09)
CVE-2024-9379 – Ivanti Cloud Services Appliance (CSA) (added 2024-10-09)
CVE-2024-29824 – Ivanti Endpoint Manager (EPM) (added 2024-10-02)
CVE-2024-7593 – Ivanti Virtual Traffic Manager (added 2024-09-24)
CVE-2024-8963 – Ivanti Cloud Services Appliance (CSA) (added 2024-09-19)
CVE-2024-8190 – Ivanti Cloud Services Appliance (added 2024-09-13)
CVE-2021-44529 – Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) (added 2024-03-25)
CVE-2024-21893 – Ivanti Connect Secure, Policy Secure, and Neurons (added 2024-01-31)
CVE-2023-35082 – Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core (added 2024-01-18)
CVE-2024-21887 – Ivanti Connect Secure and Policy Secure (added 2024-01-10)
CVE-2023-46805 – Ivanti Connect Secure and Policy Secure (added 2024-01-10)
CVE-2023-38035 – Ivanti Sentry (added 2023-08-22)
CVE-2023-35081 – Ivanti Endpoint Manager Mobile (EPMM) (added 2023-07-31)
CVE-2023-35078 – Ivanti Endpoint Manager Mobile (EPMM) (added 2023-07-25)
CVE-2021-22900 – Ivanti Pulse Connect Secure (added 2021-11-03)
CVE-2021-22899 – Ivanti Pulse Connect Secure (added 2021-11-03)
CVE-2021-22894 – Ivanti Pulse Connect Secure (added 2021-11-03)
CVE-2021-22893 – Ivanti Pulse Connect Secure (added 2021-11-03)
CVE-2020-8260 – Ivanti Pulse Connect Secure (added 2021-11-03)
CVE-2020-8243 – Ivanti Pulse Connect Secure (added 2021-11-03)
CVE-2020-15505 – Ivanti MobileIron Multiple Products (added 2021-11-03)
CVE-2019-11539 – Ivanti Pulse Connect Secure and Pulse Policy Secure (added 2021-11-03)
CVE-2019-11510 – Ivanti Pulse Connect Secure (added 2021-11-03)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).