Patchfirst: Ivanti vulnerabilities

Patchfirst: Ivanti vulnerabilitieshttps://patchfirst.co/vendor/ivanti/New and newly exploited Ivanti CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMT[KEV] CVE-2026-111357: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-111357/CVE-2026-111357#kevFri, 30 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-30. ENISA EUVD lists it as exploited. EPSS 0.3% (higher than 24.6% of CVEs). CVSS 7.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 57.0 of 100.kevT1068T1548[KEV] CVE-2026-118527: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-118527/CVE-2026-118527#kevFri, 30 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-30. No EPSS score. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 45.0 of 100.kevT1190T1105[KEV] CVE-2026-104935: Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-104935/CVE-2026-104935#kevTue, 13 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 86.8% (higher than 99.74% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.0 of 100.kevpublic-exploitT1190T1059CVE-2026-109412: An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak…https://patchfirst.co/cve/CVE-2026-109412/CVE-2026-109412Tue, 13 Oct 2026 00:00:00 GMTIvanti · Neurons Patch for Intune. Not in CISA KEV. EPSS 0.9% (higher than 58.8% of CVEs). CVSS 9.9 CRITICAL. Priority 20.8 of 100.CVE-2026-106042: An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote…https://patchfirst.co/cve/CVE-2026-106042/CVE-2026-106042Tue, 13 Oct 2026 00:00:00 GMTIvanti · Xtraction. Not in CISA KEV. EPSS 0.8% (higher than 56.2% of CVEs). CVSS 9.9 CRITICAL. Priority 20.3 of 100.[KEV] CVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-10520/CVE-2026-10520#kevThu, 11 Jun 2026 00:00:00 GMTIvanti · Sentry. In CISA KEV since 2026-06-11. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 75.0 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2026-6973: Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-6973/CVE-2026-6973#kevThu, 07 May 2026 00:00:00 GMTIvanti · Endpoint Manager Mobile (EPMM). In CISA KEV since 2026-05-07. ENISA EUVD lists it as exploited. EPSS 34.5% (higher than 98.4% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 67.7 of 100.kevT1078T1059[KEV] CVE-2026-1340: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-1340/CVE-2026-1340#kevWed, 08 Apr 2026 00:00:00 GMTIvanti · Endpoint Manager Mobile (EPMM). In CISA KEV since 2026-04-08. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2026-1603: Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-1603/CVE-2026-1603#kevMon, 09 Mar 2026 00:00:00 GMTIvanti · Endpoint Manager (EPM). In CISA KEV since 2026-03-09. ENISA EUVD lists it as exploited. EPSS 88.3% (higher than 99.77% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 73.2 of 100.kevpublic-exploitT1190T1005[KEV] CVE-2026-1281: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-1281/CVE-2026-1281#kevThu, 29 Jan 2026 00:00:00 GMTIvanti · Endpoint Manager Mobile (EPMM). In CISA KEV since 2026-01-29. ENISA EUVD lists it as exploited. EPSS 98.7% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 88.7 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-4428/CVE-2025-4428#kevMon, 19 May 2025 00:00:00 GMTIvanti · Endpoint Manager Mobile (EPMM). In CISA KEV since 2025-05-19. ENISA EUVD lists it as exploited. EPSS 88.0% (higher than 99.76% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1543 Create or Modify System Process. Priority 69.1 of 100.kevpublic-exploitT1190T1059T1543[KEV] CVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-4427/CVE-2025-4427#kevMon, 19 May 2025 00:00:00 GMTIvanti · Endpoint Manager Mobile (EPMM). In CISA KEV since 2025-05-19. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1505.003 Web Shell. Priority 68.2 of 100.kevpublic-exploitT1190T1059T1505.003[KEV] CVE-2025-22457: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-22457/CVE-2025-22457#kevFri, 04 Apr 2025 00:00:00 GMTIvanti · Connect Secure, Policy Secure, and ZTA Gateways. In CISA KEV since 2025-04-04, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1059[KEV] CVE-2024-13161: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-13161/CVE-2024-13161#kevMon, 10 Mar 2025 00:00:00 GMTIvanti · Endpoint Manager (EPM). In CISA KEV since 2025-03-10. ENISA EUVD lists it as exploited. EPSS 89.8% (higher than 99.79% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1558 Steal or Forge Kerberos Tickets; T1550.002 Pass the Hash; T1087 Account Discovery. Priority 68.2 of 100.kevpublic-exploitT1190T1558T1550.002T1087[KEV] CVE-2024-13160: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-13160/CVE-2024-13160#kevMon, 10 Mar 2025 00:00:00 GMTIvanti · Endpoint Manager (EPM). In CISA KEV since 2025-03-10. ENISA EUVD lists it as exploited. EPSS 91.0% (higher than 99.81% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1558 Steal or Forge Kerberos Tickets; T1550.002 Pass the Hash; T1087 Account Discovery. Priority 68.2 of 100.kevpublic-exploitT1190T1558T1550.002T1087[KEV] CVE-2024-13159: Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-13159/CVE-2024-13159#kevMon, 10 Mar 2025 00:00:00 GMTIvanti · Endpoint Manager (EPM). In CISA KEV since 2025-03-10. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1558 Steal or Forge Kerberos Tickets; T1550.002 Pass the Hash; T1087 Account Discovery. Priority 68.2 of 100.kevpublic-exploitT1190T1558T1550.002T1087CVE-2024-13179: Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…https://patchfirst.co/cve/CVE-2024-13179/CVE-2024-13179Tue, 14 Jan 2025 00:00:00 GMTIvanti · Avalanche. Not in CISA KEV. EPSS 63.8% (higher than 99.22% of CVEs). CVSS 7.3 HIGH. Priority 25.0 of 100.CVE-2024-13162: SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update…https://patchfirst.co/cve/CVE-2024-13162/CVE-2024-13162Tue, 14 Jan 2025 00:00:00 GMTIvanti · Endpoint Manager. Not in CISA KEV. EPSS 65.0% (higher than 99.25% of CVEs). CVSS 7.2 HIGH. Priority 24.9 of 100.[KEV] CVE-2025-0282: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-0282/CVE-2025-0282#kevWed, 08 Jan 2025 00:00:00 GMTIvanti · Connect Secure, Policy Secure, and ZTA Gateways. In CISA KEV since 2025-01-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1595 Active Scanning; T1003 OS Credential Dumping; T1055 Process Injection; T1018 Remote System Discovery; T1046 Network Service Discovery. Named in 2 threat reports. Priority 85.4 of 100.kevransomwarepublic-exploitT1190T1595T1003T1055T1018T1046CVE-2025-0283: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version…https://patchfirst.co/cve/CVE-2025-0283/CVE-2025-0283Wed, 08 Jan 2025 00:00:00 GMTIvanti · Connect Secure. Not in CISA KEV. EPSS 17.5% (higher than 97.1% of CVEs). CVSS 7.0 HIGH. Named in 2 threat reports. Priority 78.5 of 100.CVE-2024-34781: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update…https://patchfirst.co/cve/CVE-2024-34781/CVE-2024-34781Wed, 13 Nov 2024 00:00:00 GMTIvanti · EPM. Not in CISA KEV. EPSS 68.5% (higher than 99.33% of CVEs). CVSS 7.2 HIGH. Priority 24.9 of 100.CVE-2024-37404: Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy…https://patchfirst.co/cve/CVE-2024-37404/CVE-2024-37404Fri, 18 Oct 2024 00:00:00 GMTIvanti · Connect Secure. Not in CISA KEV. EPSS 71.0% (higher than 99.4% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 31.3 of 100.public-exploit[KEV] CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-9380/CVE-2024-9380#kevWed, 09 Oct 2024 00:00:00 GMTIvanti · Cloud Services Appliance (CSA). In CISA KEV since 2024-10-09. ENISA EUVD lists it as exploited. EPSS 58.3% (higher than 99.09% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 62.9 of 100.kevT1190T1059[KEV] CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-9379/CVE-2024-9379#kevWed, 09 Oct 2024 00:00:00 GMTIvanti · Cloud Services Appliance (CSA). In CISA KEV since 2024-10-09. ENISA EUVD lists it as exploited. EPSS 44.3% (higher than 98.8% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 62.8 of 100.kevT1190T1059CVE-2024-9381: Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to…https://patchfirst.co/cve/CVE-2024-9381/CVE-2024-9381Tue, 08 Oct 2024 00:00:00 GMTIvanti · CSA (Cloud Services Appliance). Not in CISA KEV. EPSS 15.6% (higher than 96.8% of CVEs). CVSS 7.2 HIGH. Priority 62.2 of 100.CVE-2024-47011: Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive…https://patchfirst.co/cve/CVE-2024-47011/CVE-2024-47011Tue, 08 Oct 2024 00:00:00 GMTIvanti · Avalanche. Not in CISA KEV. EPSS 56.3% (higher than 99.05% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.[KEV] CVE-2024-29824: Ivanti Endpoint Manager (EPM) SQL Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-29824/CVE-2024-29824#kevWed, 02 Oct 2024 00:00:00 GMTIvanti · Endpoint Manager (EPM). In CISA KEV since 2024-10-02. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.2 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-7593/CVE-2024-7593#kevTue, 24 Sep 2024 00:00:00 GMTIvanti · Virtual Traffic Manager. In CISA KEV since 2024-09-24. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 69.9 of 100.kevpublic-exploitT1190T1078[KEV] CVE-2024-8963: Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-8963/CVE-2024-8963#kevThu, 19 Sep 2024 00:00:00 GMTIvanti · Cloud Services Appliance (CSA). In CISA KEV since 2024-09-19. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 69.4 of 100.kevpublic-exploitT1190T1005[KEV] CVE-2024-8190: Ivanti Cloud Services Appliance OS Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-8190/CVE-2024-8190#kevFri, 13 Sep 2024 00:00:00 GMTIvanti · Cloud Services Appliance. In CISA KEV since 2024-09-13. ENISA EUVD lists it as exploited. EPSS 88.5% (higher than 99.77% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.kevpublic-exploitT1078T1059CVE-2024-37397: An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024…https://patchfirst.co/cve/CVE-2024-37397/CVE-2024-37397Thu, 12 Sep 2024 00:00:00 GMTIvanti · EPM. Not in CISA KEV. EPSS 59.3% (higher than 99.12% of CVEs). CVSS 8.2 HIGH. Priority 25.6 of 100.CVE-2024-38653: XXE in SmartDeviceServer in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to read arbitrary files on…https://patchfirst.co/cve/CVE-2024-38653/CVE-2024-38653Wed, 14 Aug 2024 00:00:00 GMTIvanti · Avalanche. Not in CISA KEV. EPSS 92.0% (higher than 99.82% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. Priority 65.7 of 100.public-exploitCVE-2024-29826: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…https://patchfirst.co/cve/CVE-2024-29826/CVE-2024-29826Fri, 31 May 2024 00:00:00 GMTIvanti · EPM. Not in CISA KEV. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.6 CRITICAL. Priority 26.7 of 100.CVE-2024-29825: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…https://patchfirst.co/cve/CVE-2024-29825/CVE-2024-29825Fri, 31 May 2024 00:00:00 GMTIvanti · EPM. Not in CISA KEV. EPSS 99.9% (higher than 99.96% of CVEs). CVSS 9.6 CRITICAL. Priority 26.7 of 100.CVE-2024-29823: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…https://patchfirst.co/cve/CVE-2024-29823/CVE-2024-29823Fri, 31 May 2024 00:00:00 GMTIvanti · EPM. Not in CISA KEV. EPSS 99.9% (higher than 99.96% of CVEs). CVSS 9.6 CRITICAL. Priority 26.7 of 100.CVE-2024-29827: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…https://patchfirst.co/cve/CVE-2024-29827/CVE-2024-29827Fri, 31 May 2024 00:00:00 GMTIvanti · EPM. Not in CISA KEV. EPSS 71.7% (higher than 99.42% of CVEs). CVSS 9.6 CRITICAL. Priority 26.6 of 100.CVE-2024-29822: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…https://patchfirst.co/cve/CVE-2024-29822/CVE-2024-29822Fri, 31 May 2024 00:00:00 GMTIvanti · EPM. Not in CISA KEV. EPSS 64.4% (higher than 99.23% of CVEs). CVSS 9.6 CRITICAL. Priority 26.6 of 100.CVE-2024-29848: An unrestricted file upload vulnerability in web component of Ivanti Avalanche before 6.4.x allows an authenticated…https://patchfirst.co/cve/CVE-2024-29848/CVE-2024-29848Fri, 31 May 2024 00:00:00 GMTIvanti · Avalanche. Not in CISA KEV. EPSS 64.4% (higher than 99.23% of CVEs). CVSS 7.2 HIGH. Priority 24.9 of 100.CVE-2024-24994: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…https://patchfirst.co/cve/CVE-2024-24994/CVE-2024-24994Fri, 19 Apr 2024 00:00:00 GMTIvanti · Avalanche. Not in CISA KEV. EPSS 68.1% (higher than 99.33% of CVEs). CVSS 8.8 HIGH. Priority 26.0 of 100.CVE-2024-24992: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…https://patchfirst.co/cve/CVE-2024-24992/CVE-2024-24992Fri, 19 Apr 2024 00:00:00 GMTIvanti · Avalanche. Not in CISA KEV. EPSS 70.9% (higher than 99.4% of CVEs). CVSS 8.8 HIGH. Priority 26.0 of 100.CVE-2024-23535: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated…https://patchfirst.co/cve/CVE-2024-23535/CVE-2024-23535Fri, 19 Apr 2024 00:00:00 GMTIvanti · Avalanche. Not in CISA KEV. EPSS 68.1% (higher than 99.33% of CVEs). CVSS 8.8 HIGH. Priority 26.0 of 100.CVE-2024-21894: A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows…https://patchfirst.co/cve/CVE-2024-21894/CVE-2024-21894Thu, 04 Apr 2024 00:00:00 GMTIvanti · Connect Secure. Not in CISA KEV. EPSS 19.0% (higher than 97.3% of CVEs). CVSS 8.2 HIGH. Priority 62.5 of 100.CVE-2023-41724: A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute…https://patchfirst.co/cve/CVE-2023-41724/CVE-2023-41724Sun, 31 Mar 2024 00:00:00 GMTIvanti · Sentry. Not in CISA KEV. EPSS 12.8% (higher than 96.3% of CVEs). CVSS 9.6 CRITICAL. Priority 61.0 of 100.CVE-2023-46808: An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes…https://patchfirst.co/cve/CVE-2023-46808/CVE-2023-46808Sun, 31 Mar 2024 00:00:00 GMTIvanti · ITSM. Not in CISA KEV. EPSS 2.0% (higher than 80.7% of CVEs). CVSS 9.9 CRITICAL. Priority 58.1 of 100.[KEV] CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2021-44529/CVE-2021-44529#kevMon, 25 Mar 2024 00:00:00 GMTIvanti · Endpoint Manager Cloud Service Appliance (EPM CSA). In CISA KEV since 2024-03-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.1% (higher than 99.93% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1195.002 Compromise Software Supply Chain. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1195.002CVE-2024-22024: An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy…https://patchfirst.co/cve/CVE-2024-22024/CVE-2024-22024Tue, 13 Feb 2024 00:00:00 GMTIvanti · ICS. Not in CISA KEV. EPSS 94.7% (higher than 99.86% of CVEs). CVSS 8.3 HIGH. Public exploit code exists. Priority 68.1 of 100.public-exploit[KEV] CVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-21893/CVE-2024-21893#kevWed, 31 Jan 2024 00:00:00 GMTIvanti · Connect Secure, Policy Secure, and Neurons. In CISA KEV since 2024-01-31, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts; T1505.003 Web Shell; T1555 Credentials from Password Stores. Priority 78.7 of 100.kevransomwarepublic-exploitT1190T1078T1505.003T1555CVE-2024-21888: A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure…https://patchfirst.co/cve/CVE-2024-21888/CVE-2024-21888Wed, 31 Jan 2024 00:00:00 GMTIvanti · ICS. Not in CISA KEV. EPSS 85.4% (higher than 99.72% of CVEs). CVSS 8.8 HIGH. Priority 64.1 of 100.[KEV] CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-35082/CVE-2023-35082#kevThu, 18 Jan 2024 00:00:00 GMTIvanti · Endpoint Manager Mobile (EPMM) and MobileIron Core. In CISA KEV since 2024-01-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1078CVE-2024-21887: Ivanti Connect Secure and Policy Secure Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2024-21887/CVE-2024-21887Fri, 12 Jan 2024 00:00:00 GMTIvanti · Connect Secure and Policy Secure. In CISA KEV since 2024-01-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1505.003 Web Shell; T1552 Unsecured Credentials. Named in 4 threat reports. Priority 88.4 of 100.kevransomwarepublic-exploitT1190T1059T1505.003T1552