Ivanti: known exploited vulnerabilities
Entries35No. 8
Ransomware-linked12
Products14
Latest2026-06-11
Added per year
By product
7
7
5
3
2
2
2
1
1
1
1
1
1
1
Entries
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-10520 | Ivanti Sentry | 2026-06-11 | 99.9% | Unknown |
| CVE-2026-6973 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-05-07 | 2.5% | Unknown |
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-04-08 | 98.6% | Unknown |
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | 2026-03-09 | 88.3% | Unknown |
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | 2026-01-29 | 98.6% | Unknown |
| CVE-2025-4428 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 86.5% | Unknown |
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | 2025-05-19 | 99.9% | Unknown |
| CVE-2025-22457 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-04-04 | 99.9% | Known |
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 90.0% | Unknown |
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 91.2% | Unknown |
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | 2025-03-10 | 99.9% | Unknown |
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | 2025-01-08 | 99.9% | Known |
| CVE-2024-9380 | Ivanti Cloud Services Appliance (CSA) | 2024-10-09 | 59.6% | Unknown |
| CVE-2024-9379 | Ivanti Cloud Services Appliance (CSA) | 2024-10-09 | 43.7% | Unknown |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | 2024-10-02 | 99.9% | Unknown |
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | 2024-09-24 | 99.9% | Unknown |
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | 2024-09-19 | 98.6% | Unknown |
| CVE-2024-8190 | Ivanti Cloud Services Appliance | 2024-09-13 | 88.5% | Unknown |
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | 2024-03-25 | 99.1% | Known |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | 2024-01-31 | 99.9% | Known |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | 2024-01-18 | 99.9% | Known |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 99.9% | Known |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | 2024-01-10 | 99.9% | Known |
| CVE-2023-38035 | Ivanti Sentry | 2023-08-22 | 99.9% | Known |
| CVE-2023-35081 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-31 | 63.5% | Unknown |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | 2023-07-25 | 99.9% | Known |
| CVE-2021-22900 | Ivanti Pulse Connect Secure | 2021-11-03 | 14.1% | Unknown |
| CVE-2021-22899 | Ivanti Pulse Connect Secure | 2021-11-03 | 22.9% | Unknown |
| CVE-2021-22894 | Ivanti Pulse Connect Secure | 2021-11-03 | 41.2% | Unknown |
| CVE-2021-22893 | Ivanti Pulse Connect Secure | 2021-11-03 | 47.1% | Known |
| CVE-2020-8260 | Ivanti Pulse Connect Secure | 2021-11-03 | 96.4% | Unknown |
| CVE-2020-8243 | Ivanti Pulse Connect Secure | 2021-11-03 | 90.7% | Unknown |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products | 2021-11-03 | 99.7% | Unknown |
| CVE-2019-11539 | Ivanti Pulse Connect Secure and Pulse Policy Secure | 2021-11-03 | 98.5% | Known |
| CVE-2019-11510 | Ivanti Pulse Connect Secure | 2021-11-03 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
CISA KEV lists 35 Ivanti vulnerabilities (No. 8 of 288 vendors).