Ivanti
CISA 가 실제 악용을 확인해 등재한 Ivanti 제품 취약점입니다. 여기 있다는 것은 이미 공격에 쓰였다는 뜻이고, 없다는 것이 안전하다는 뜻은 아닙니다.
최근 등재
등재일 최신순입니다.
● 실제 악용이 확인됨CVE-2026-111357Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability0.5%높음7.0● 실제 악용이 확인됨CVE-2026-118527Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability보통4.3● 실제 악용이 확인됨CVE-2026-104935Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability88.9%높음8.6● 실제 악용이 확인됨CVE-2026-10520Ivanti Sentry OS Command Injection Vulnerability99.9%심각10.0● 실제 악용이 확인됨CVE-2026-6973Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability34.5%높음7.2● 실제 악용이 확인됨CVE-2026-1340Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability98.6%심각9.8● 실제 악용이 확인됨CVE-2026-1603Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability88.3%높음7.5● 실제 악용이 확인됨CVE-2026-1281Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability98.7%심각9.8
등재된 제품
16종
Connect Secure 3Sentry 2Endpoint Manager Mobile (EPMM) 7 Endpoint Manager (EPM) 1Connect Secure, Policy Secure, and ZTA Gateways 2Endpoint Manager (EPM) 4Cloud Services Appliance (CSA) 3Virtual Traffic Manager 1Cloud Services Appliance 1Endpoint Manager Cloud Service Appliance (EPM CSA) 1Connect Secure, Policy Secure, and Neurons 1Endpoint Manager Mobile (EPMM) and MobileIron Core 1Connect Secure and Policy Secure 2Pulse Connect Secure and Pulse Policy Secure 1Pulse Connect Secure 7MobileIron Multiple Products 1
전체 목록
Ivanti · 38건
| CVE | 등재일 | 제품 | 취약점 이름 | 악용 확률 | 심각도 | 조치 기한 |
|---|---|---|---|---|---|---|
| CVE-2026-111357 | 2026-10-30 | Connect Secure | Ivanti Connect Secure Missing Authentication for Critical Function Vul… | 0.5% | 높음7.0 | 2026-11-02 |
| CVE-2026-118527 | 2026-10-30 | Connect Secure | Ivanti Connect Secure Generation of Predictable Numbers or Identifiers… | 보통4.3 | 2026-11-13 | |
| CVE-2026-104935 | 2026-10-13 | Connect Secure | Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability | 88.9% | 높음8.6 | 2026-10-16 |
| CVE-2026-10520 | 2026-06-11 | Sentry | Ivanti Sentry OS Command Injection Vulnerability | 99.9% | 심각10.0 | 2026-06-14 |
| CVE-2026-6973 | 2026-05-07 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulner… | 34.5% | 높음7.2 | 2026-05-10 |
| CVE-2026-1340 | 2026-04-08 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 98.6% | 심각9.8 | 2026-04-11 |
| CVE-2026-1603 | 2026-03-09 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability | 88.3% | 높음7.5 | 2026-03-23 |
| CVE-2026-1281 | 2026-01-29 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 98.7% | 심각9.8 | 2026-02-01 |
| CVE-2025-4427 | 2025-05-19 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerabil… | 99.9% | 높음7.5 | 2025-06-09 |
| CVE-2025-4428 | 2025-05-19 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability | 88.0% | 높음8.8 | 2025-06-09 |
| CVE-2025-22457 랜섬웨어 악용 | 2025-04-04 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buf… | 100.0% | 심각9.8 | 2025-04-11 |
| CVE-2024-13161 | 2025-03-10 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 89.8% | 높음7.5 | 2025-03-31 |
| CVE-2024-13160 | 2025-03-10 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 91.0% | 높음7.5 | 2025-03-31 |
| CVE-2024-13159 | 2025-03-10 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability | 100.0% | 높음7.5 | 2025-03-31 |
| CVE-2025-0282 랜섬웨어 악용 | 2025-01-08 | Connect Secure, Policy Secure, and ZTA Gateways | Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buf… | 100.0% | 심각9.0 | 2025-01-15 |
| CVE-2024-9379 | 2024-10-09 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 44.3% | 높음7.2 | 2024-10-30 |
| CVE-2024-9380 | 2024-10-09 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerabili… | 58.3% | 높음7.2 | 2024-10-30 |
| CVE-2024-29824 | 2024-10-02 | Endpoint Manager (EPM) | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability | 99.9% | 높음8.8 | 2024-10-23 |
| CVE-2024-7593 | 2024-09-24 | Virtual Traffic Manager | Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability | 100.0% | 심각9.8 | 2024-10-15 |
| CVE-2024-8963 | 2024-09-19 | Cloud Services Appliance (CSA) | Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 98.6% | 심각9.1 | 2024-10-10 |
| CVE-2024-8190 | 2024-09-13 | Cloud Services Appliance | Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 88.5% | 높음7.2 | 2024-10-04 |
| CVE-2021-44529 랜섬웨어 악용 | 2024-03-25 | Endpoint Manager Cloud Service Appliance (EPM CSA) | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injecti… | 99.1% | 심각9.8 | 2024-04-15 |
| CVE-2024-21893 랜섬웨어 악용 | 2024-01-31 | Connect Secure, Policy Secure, and Neurons | Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request … | 100.0% | 높음8.2 | 2024-02-02 |
| CVE-2023-35082 랜섬웨어 악용 | 2024-01-18 | Endpoint Manager Mobile (EPMM) and MobileIron Core | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authenticati… | 100.0% | 심각9.8 | 2024-02-08 |
| CVE-2024-21887 랜섬웨어 악용 | 2024-01-10 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Command Injection Vulnerabilit… | 100.0% | 심각9.1 | 2024-01-22 |
| CVE-2023-46805 랜섬웨어 악용 | 2024-01-10 | Connect Secure and Policy Secure | Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerab… | 100.0% | 높음8.2 | 2024-01-22 |
| CVE-2023-38035 랜섬웨어 악용 | 2023-08-22 | Sentry | Ivanti Sentry Authentication Bypass Vulnerability | 100.0% | 심각9.8 | 2023-09-12 |
| CVE-2023-35081 | 2023-07-31 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 63.6% | 높음7.2 | 2023-08-21 |
| CVE-2023-35078 랜섬웨어 악용 | 2023-07-25 | Endpoint Manager Mobile (EPMM) | Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 100.0% | 심각9.8 | 2023-08-15 |
| CVE-2019-11539 랜섬웨어 악용 | 2021-11-03 | Pulse Connect Secure and Pulse Policy Secure | Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulner… | 98.5% | 높음7.2 | 2022-05-03 |
| CVE-2020-8260 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | 96.5% | 높음7.2 | 2022-05-03 |
| CVE-2021-22899 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Command Injection Vulnerability | 22.9% | 높음8.8 | 2022-05-03 |
| CVE-2021-22894 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulner… | 41.3% | 높음8.8 | 2022-05-03 |
| CVE-2021-22900 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 14.1% | 높음7.2 | 2022-05-03 |
| CVE-2019-11510 랜섬웨어 악용 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 100.0% | 심각10.0 | 2022-05-03 |
| CVE-2020-15505 | 2021-11-03 | MobileIron Multiple Products | Ivanti MobileIron Multiple Products Remote Code Execution Vulnerabilit… | 99.7% | 심각9.8 | 2022-05-03 |
| CVE-2021-22893 랜섬웨어 악용 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 47.2% | 심각10.0 | 2022-05-03 |
| CVE-2020-8243 | 2021-11-03 | Pulse Connect Secure | Ivanti Pulse Connect Secure Code Execution Vulnerability | 90.8% | 높음7.2 | 2022-05-03 |