Ivanti
- Total products in the ecosystem
- 31
- Total vulnerabilities (90 days)
- 15
en
Verify to analyze this security profile
As of 09/14/2026, Ivanti recorded 15 security vulnerabilities in the last 90 days across 6 products, including 14 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Neurons for ITSM had the most security vulnerabilities in the Ivanti ecosystem, with 5 vulnerabilities—approximately 33.33% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-12647 | Exploitation statusNot known exploited | FixNot confirmed | Affected productIvanti Neurons for ITSM | Published09/08/2026 | SeverityCritical |
CVE-2026-12646 | Exploitation statusNot known exploited | FixNot confirmed | Affected productIvanti Neurons for ITSM | Published09/08/2026 | SeverityCritical |
CVE-2026-12645 | Exploitation statusNot known exploited | FixNot confirmed | Affected productIvanti Neurons for ITSM | Published09/08/2026 | SeverityCritical |
CVE-2026-83527 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSentry | Published09/08/2026 | SeverityHigh |
CVE-2026-12648 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNeurons for ITSM | Published09/08/2026 | SeverityHigh |
CVE-2026-12650 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNeurons for ITSM | Published09/08/2026 | SeverityCritical |
CVE-2026-12651 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNeurons for ITSM | Published09/08/2026 | SeverityHigh |
CVE-2026-12745 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNeurons for ITSM | Published09/08/2026 | SeverityCritical |
CVE-2026-12744 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNeurons for ITSM | Published09/08/2026 | SeverityCritical |
CVE-2026-18851 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published09/08/2026 | SeverityHigh |
CVE-2026-18129 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published08/11/2026 | SeverityHigh |
CVE-2026-18127 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published08/11/2026 | SeverityHigh |
CVE-2026-18125 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published08/11/2026 | SeverityHigh |
CVE-2026-14903 | Exploitation statusNot known exploited | FixNot confirmed | Affected productXtraction | Published07/14/2026 | SeverityHigh |
CVE-2026-14902 | Exploitation statusNot known exploited | FixNot confirmed | Affected productXtraction | Published07/14/2026 | SeverityMedium |
CVE-2026-10727 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published06/09/2026 | SeverityHigh |
CVE-2026-10523 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSentry | Published06/09/2026 | SeverityCritical |
CVE-2026-10520 | Exploitation statusPublic exploit | FixNot confirmed | Affected productSentry | Published06/09/2026 | SeverityCritical |
CVE-2026-9614 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNeurons for ITSM (On-Premises) | Published06/01/2026 | SeverityHigh |
CVE-2026-8992 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSecure Access Client | Published05/22/2026 | SeverityHigh |
CVE-2026-8111 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published05/12/2026 | SeverityHigh |
CVE-2026-8110 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published05/12/2026 | SeverityHigh |
CVE-2026-8109 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published05/12/2026 | SeverityMedium |
CVE-2026-8051 | Exploitation statusNot known exploited | FixNot confirmed | Affected productVirtual Traffic Manager | Published05/12/2026 | SeverityHigh |
CVE-2026-7432 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSecure Access Client | Published05/12/2026 | SeverityHigh |
CVE-2026-7431 | Exploitation statusNot known exploited | FixNot confirmed | Affected productSecure Access Client | Published05/12/2026 | SeverityMedium |
CVE-2026-8043 | Exploitation statusNot known exploited | FixNot confirmed | Affected productXtraction | Published05/12/2026 | SeverityCritical |
CVE-2026-5787 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published05/07/2026 | SeverityHigh |
CVE-2026-5788 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published05/07/2026 | SeverityHigh |
CVE-2026-7821 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published05/07/2026 | SeverityHigh |
CVE-2026-6973 | Exploitation statusKEV | FixNot confirmed | Affected productEndpoint Manager Mobile | Published05/07/2026 | SeverityHigh |
CVE-2026-5786 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published05/07/2026 | SeverityHigh |
CVE-2026-4914 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNeurons for ITSM (On-Premise) | Published04/14/2026 | SeverityMedium |
CVE-2026-4913 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNeurons for ITSM (On-Premise) | Published04/14/2026 | SeverityMedium |
CVE-2026-3483 | Exploitation statusNot known exploited | FixNot confirmed | Affected productDesktop and Server Management | Published03/10/2026 | SeverityHigh |
CVE-2026-1603 | Exploitation statusKEV | FixNot confirmed | Affected productEndpoint Manager | Published02/10/2026 | SeverityHigh |
CVE-2026-1602 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published02/10/2026 | SeverityMedium |
CVE-2026-1340 | Exploitation statusKEV | FixNot confirmed | Affected productEndpoint Manager Mobile | Published01/29/2026 | SeverityCritical |
CVE-2026-1281 | Exploitation statusKEV | FixNot confirmed | Affected productEndpoint Manager Mobile | Published01/29/2026 | SeverityCritical |
CVE-2025-13662 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published12/09/2025 | SeverityHigh |
CVE-2025-13661 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published12/09/2025 | SeverityHigh |
CVE-2025-13659 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published12/09/2025 | SeverityHigh |
CVE-2025-10573 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published12/09/2025 | SeverityCritical |
CVE-2025-10918 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published11/11/2025 | SeverityHigh |
CVE-2025-10986 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published10/14/2025 | SeverityMedium |
CVE-2025-10985 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published10/14/2025 | SeverityHigh |
CVE-2025-10243 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published10/14/2025 | SeverityHigh |
CVE-2025-10242 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published10/14/2025 | SeverityHigh |
CVE-2025-62384 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62386 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62383 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62391 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62385 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62387 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62388 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62389 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62390 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-62392 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-11623 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityMedium |
CVE-2025-9713 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityHigh |
CVE-2025-11622 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published10/13/2025 | SeverityHigh |
CVE-2025-55144 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityMedium |
CVE-2025-55143 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityMedium |
CVE-2025-55142 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityHigh |
CVE-2025-55141 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityHigh |
CVE-2025-55139 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityMedium |
CVE-2025-55148 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityHigh |
CVE-2025-55147 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityHigh |
CVE-2025-55146 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityMedium |
CVE-2025-55145 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure 22.7R2.9 | Published09/09/2025 | SeverityHigh |
CVE-2025-8711 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published09/09/2025 | SeverityMedium |
CVE-2025-8712 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure before | Published09/09/2025 | SeverityMedium |
CVE-2025-9872 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published09/09/2025 | SeverityHigh |
CVE-2025-9712 | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published09/09/2025 | SeverityHigh |
CVE-2025-5468 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published08/12/2025 | SeverityMedium |
CVE-2025-5466 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published08/12/2025 | SeverityMedium |
CVE-2025-5462 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published08/12/2025 | SeverityHigh |
CVE-2025-5456 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published08/12/2025 | SeverityHigh |
CVE-2025-8310 | Exploitation statusNot known exploited | FixNot confirmed | Affected productVirtual Application Delivery ControllerCWE-862 | Published08/12/2025 | SeverityMedium |
CVE-2025-8297 | Exploitation statusNot known exploited | FixNot confirmed | Affected productAvalanche | Published08/12/2025 | SeverityHigh |
CVE-2025-8296 | Exploitation statusNot known exploited | FixNot confirmed | Affected productAvalanche | Published08/12/2025 | SeverityHigh |
CVE-2023-39339 | Exploitation statusNot known exploited | FixYes | Affected productPolicy Secure | Published07/12/2025 | SeverityMedium |
CVE-2023-39338 | Exploitation statusNot known exploited | FixYes | Affected productSentry | Published07/12/2025 | SeverityMedium |
CVE-2024-38648 | Exploitation statusNot known exploited | FixYes | Affected productDSM | Published07/12/2025 | SeverityCritical |
CVE-2023-38036 | Exploitation statusNot known exploited | FixYes | Affected productAvalanche | Published07/12/2025 | SeverityCritical |
CVE-2025-6771OS command injection in Ivanti Endpoint Manager | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published07/08/2025 | SeverityHigh |
CVE-2025-0292 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published07/08/2025 | SeverityMedium |
CVE-2025-0293 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published07/08/2025 | SeverityMedium |
CVE-2025-5464 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published07/08/2025 | SeverityMedium |
CVE-2025-6770OS command injection in Ivanti Endpoint Manager | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager Mobile | Published07/08/2025 | SeverityHigh |
CVE-2025-5463 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published07/08/2025 | SeverityMedium |
CVE-2025-5451 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published07/08/2025 | SeverityMedium |
CVE-2025-5450 | Exploitation statusNot known exploited | FixNot confirmed | Affected productConnect Secure | Published07/08/2025 | SeverityMedium |
CVE-2025-7037SQL injection in Ivanti Endpoint Manager | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published07/08/2025 | SeverityHigh |
CVE-2025-6996Improper Encryption in Ivanti Endpoint Manager | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published07/08/2025 | SeverityHigh |
CVE-2025-6995Improper Encryption in Ivanti Endpoint Manager | Exploitation statusNot known exploited | FixNot confirmed | Affected productEndpoint Manager | Published07/08/2025 | SeverityHigh |
CVE-2025-5353 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWorkspace Control | Published06/10/2025 | SeverityHigh |
CVE-2025-22463 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWorkspace Control | Published06/10/2025 | SeverityHigh |
CVE-2025-22455 | Exploitation statusNot known exploited | FixNot confirmed | Affected productWorkspace Control | Published06/10/2025 | SeverityHigh |
CVE-2025-4428Remote Code Execution | Exploitation statusKEV | FixNot confirmed | Affected productEndpoint Manager Mobile | Published05/13/2025 | SeverityHigh |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan