Ivanti vulnerabilities
We track 301 vulnerabilities in Ivanti products across 53 products. 300 are rated high or critical, and 38 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest Ivanti vulnerabilities
- 9.8 Critical severity
Avalanche: Improper Neutralization of Special Elements used in an SQL Command
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-
- 9.8 Critical severity
Avalanche: Deserialization of Untrusted Data
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specifi
- 8.8 High severity
Avalanche: Improper Neutralization of Special Elements used in an SQL Command
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific
- 9.8 Critical severity
Avalanche: Improper Neutralization of Special Elements used in an SQL Command
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. The specific flaw exists within the ProfileDaoImpl class. A crafted request can trigger execution of SQL queries composed from a user-
- 8.8 High severity
Avalanche: Deserialization of Untrusted Data
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specifi
- 7.5 High severity
Ivanti Avalanche: Improper Authentication
An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.
- 7.8 High severity
Ivanti Endpoint Manager: XML Injection
XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.
- 7.5 High severity
Ivanti Connect Secure (ICS), Ivanti Policy…: Incorrect Calculation
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neuron
- 7.5 High severity
Ivanti Connect Secure (ICS), Ivanti Policy…: Uncontrolled Resource Consumption
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neuron
- 9.8 Critical severity
Ivanti Endpoint Manger: Incorrect Default Permissions
A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execute commands with elevated privileges.
- 7.2 High severity
Ivanti Incapptic Connect: Deserialization of Untrusted Data
A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35
- 9.8 Critical severity
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Exploited
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).
- 7.2 High severity
Ivanti Pulse Connect Secure Unrestricted File Upload Exploited
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
- 8.8 High severity
Ivanti Pulse Connect Secure Command Injection Exploited
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profiles Feature
- 8.8 High severity
Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Exploited
A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.
- 10.0 Critical severity
Ivanti Pulse Connect Secure Use-After-Free Exploited
Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remo
- 7.2 High severity
Ivanti Pulse Connect Secure Code Execution Exploited
A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution using uncontrolled gzip extraction.
- 7.2 High severity
Ivanti Pulse Connect Secure Code Execution Exploited
A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution.
- 7.2 High severity
Pulse Connect Secure Code Injection Exploited
A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.
- 10.0 Critical severity
Ivanti Pulse Connect Secure Arbitrary File Read Exploited
In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .
- 7.2 High severity
Ivanti Pulse Connect Secure and Policy Secure Command Injection Exploited
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX before 5.4R7.1, 5.3RX before 5.3R12.1, 5.2RX before 5.2R12.1,