Ivanti
CISA 가 실제 악용을 확인해 등재한 Ivanti 제품 취약점입니다. 여기 있다는 것은 이미 공격에 쓰였다는 뜻이고, 없다는 것이 안전하다는 뜻은 아닙니다.
최근 등재
등재일 최신순입니다.
● 실제 악용이 확인됨CVE-2026-10520Ivanti Sentry OS Command Injection Vulnerability99.9%심각10.0● 실제 악용이 확인됨CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability2.5%높음7.2● 실제 악용이 확인됨CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability98.6%심각9.8● 실제 악용이 확인됨CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability87.9%높음7.5● 실제 악용이 확인됨CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability98.7%심각9.8● 실제 악용이 확인됨CVE-2025-4428Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability86.5%높음8.8● 실제 악용이 확인됨CVE-2025-4427Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability99.9%높음7.5● 랜섬웨어 캠페인에 사용됨CVE-2025-22457Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerabilit…100.0%심각9.8
등재된 제품
15종
Sentry 2Endpoint Manager Mobile (EPMM) 7 Endpoint Manager (EPM) 1Connect Secure, Policy Secure, and ZTA Gateways 2Endpoint Manager (EPM) 4Cloud Services Appliance (CSA) 3Virtual Traffic Manager 1Cloud Services Appliance 1Endpoint Manager Cloud Service Appliance (EPM CSA) 1Connect Secure, Policy Secure, and Neurons 1Endpoint Manager Mobile (EPMM) and MobileIron Core 1Connect Secure and Policy Secure 2Pulse Connect Secure 7MobileIron Multiple Products 1Pulse Connect Secure and Pulse Policy Secure 1
전체 목록
Ivanti · 35건
| CVE | 등재일 | 제품 | 취약점 이름 | 악용 확률 | 심각도 | 조치 기한 |
|---|---|---|---|---|---|---|
| CVE-2026-10520 | 2026-06-11 | Sentry | Ivanti Sentry OS Command Injection Vulnerability | 99.9% | 심각10.0 | 2026-06-14 |
| CVE-2026-6973 | 2026-05-07 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulner… | 2.5% | 높음7.2 | 2026-05-10 |
| CVE-2026-1340 | 2026-04-08 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 98.6% | 심각9.8 | 2026-04-11 |
| CVE-2026-1603 | 2026-03-09 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 87.9% | 높음7.5 | 2026-03-23 |
| CVE-2026-1281 | 2026-01-29 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 98.7% | 심각9.8 | 2026-02-01 |
| CVE-2025-4428 | 2025-05-19 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 86.5% | 높음8.8 | 2025-06-09 |
| CVE-2025-4427 | 2025-05-19 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerabil… | 99.9% | 높음7.5 | 2025-06-09 |
| CVE-2025-22457 랜섬웨어 악용 | 2025-04-04 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buf… | 100.0% | 심각9.8 | 2025-04-11 |
| CVE-2024-13160 | 2025-03-10 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 91.2% | 높음7.5 | 2025-03-31 |
| CVE-2024-13161 | 2025-03-10 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 90.1% | 높음7.5 | 2025-03-31 |
| CVE-2024-13159 | 2025-03-10 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 100.0% | 높음7.5 | 2025-03-31 |
| CVE-2025-0282 랜섬웨어 악용 | 2025-01-08 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buf… | 100.0% | 심각9.0 | 2025-01-15 |
| CVE-2024-9379 | 2024-10-09 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 43.8% | 높음7.2 | 2024-10-30 |
| CVE-2024-9380 | 2024-10-09 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerabili… | 59.7% | 높음7.2 | 2024-10-30 |
| CVE-2024-29824 | 2024-10-02 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 99.9% | 높음8.8 | 2024-10-23 |
| CVE-2024-7593 | 2024-09-24 | Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 100.0% | 심각9.8 | 2024-10-15 |
| CVE-2024-8963 | 2024-09-19 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 98.6% | 심각9.1 | 2024-10-10 |
| CVE-2024-8190 | 2024-09-13 | Cloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 88.5% | 높음7.2 | 2024-10-04 |
| CVE-2021-44529 랜섬웨어 악용 | 2024-03-25 | Endpoint Manager Cloud Service Appliance (EPM CSA) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injecti… | 99.1% | 심각9.8 | 2024-04-15 |
| CVE-2024-21893 랜섬웨어 악용 | 2024-01-31 | Connect Secure, Policy Secure, and Neurons | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request … | 100.0% | 높음8.2 | 2024-02-02 |
| CVE-2023-35082 랜섬웨어 악용 | 2024-01-18 | Endpoint Manager Mobile (EPMM) and MobileIron Core | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authenticati… | 100.0% | 심각9.8 | 2024-02-08 |
| CVE-2023-46805 랜섬웨어 악용 | 2024-01-10 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerab… | 100.0% | 높음8.2 | 2024-01-22 |
| CVE-2024-21887 랜섬웨어 악용 | 2024-01-10 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Command Injection Vulnerabilit… | 100.0% | 심각9.1 | 2024-01-22 |
| CVE-2023-38035 랜섬웨어 악용 | 2023-08-22 | Sentry | Ivanti Sentry Authentication Bypass Vulnerability | 100.0% | 심각9.8 | 2023-09-12 |
| CVE-2023-35081 | 2023-07-31 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 63.6% | 높음7.2 | 2023-08-21 |
| CVE-2023-35078 랜섬웨어 악용 | 2023-07-25 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 100.0% | 심각9.8 | 2023-08-15 |
| CVE-2021-22894 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulner… | 41.3% | 높음8.8 | 2022-05-03 |
| CVE-2020-15505 | 2021-11-03 | MobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerabilit… | 99.7% | 심각9.8 | 2022-05-03 |
| CVE-2021-22893 랜섬웨어 악용 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 47.2% | 심각10.0 | 2022-05-03 |
| CVE-2019-11539 랜섬웨어 악용 | 2021-11-03 | Pulse Connect Secure and Pulse Policy Secure | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulner… | 98.5% | 높음7.2 | 2022-05-03 |
| CVE-2020-8243 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | 90.8% | 높음7.2 | 2022-05-03 |
| CVE-2019-11510 랜섬웨어 악용 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 100.0% | 심각10.0 | 2022-05-03 |
| CVE-2021-22900 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 14.1% | 높음7.2 | 2022-05-03 |
| CVE-2021-22899 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | 22.9% | 높음8.8 | 2022-05-03 |
| CVE-2020-8260 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | 96.5% | 높음7.2 | 2022-05-03 |