292 matches found
Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340)
Update 29 Jan: Step by Step RPM Install KB included Update 4 Feb: Fixed in Security Update: 0S-4 and 0L-4 included Update: 6 Feb: RPM detection script available to help customers assess potential impact. Technical Analysis updated with reliable Indicators of Compromise IoC’s. Both in partnership...
Security Advisory Ivanti Desktop and Server Management (DSM) (CVE-2024-7572)
Summary Ivanti has released updates for Ivanti Desktop and Server Management which addresses one high severity vulnerability. Successful exploitation could lead to local arbitrary file deletion. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure...
Security Advisory EPM November 2024 for EPM 2024 and EPM 2022 SU6
Update Regarding Ivanti EPM Endpoint Manager Downloads As part of our ongoing efforts to enhance your experience and streamline our processes we have migrated the software downloads from the Ivanti Community to the Ivanti License System ILS. You will continue to use your current Ivanti Single...
Security Advisory Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), Ivanti Secure Access Client (ISAC) (Multiple CVEs)
Summary Ivanti has released updates for Ivanti Connect Secure ICS,Ivanti Policy Secure IPS and Ivanti Secure Access Client ISAC which addresses medium, high and critical vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure...
Ivanti Avalanche 6.4.5 Security Advisory (Multiple CVE's)
Summary Ivanti has released updates for Ivanti Avalanche which addresses high severity vulnerabilities. Successful exploitation could lead to information disclosure, authentication bypass or denial of service. We are not aware of any customers being exploited by these vulnerabilities at the time ...
Security Advisory: Ivanti Neurons for ITSM (CVE-2024-7569, CVE-2024-7570)
Last Modified Date Aug 23, 2026 11:33:04 PM...
Avalanche 6.4.3 Security Hardening and CVEs addressed
Avalanche 6.4.3 has addressed some new security hardening and vulnerabilities in our Q1 2024 release. We are not aware of any exploitation of these vulnerabilities at the time of disclosure. To address the security vulnerabilities listed below, it is highly recommended to download the Avalanche...
Security patch release - Ivanti Connect Secure 22.6R2 and 22.6R2.1
Last Modified Date Apr 18, 2024 5:20:53 PM...
CVE-2023-39335 - Certificate creation authentication bypass in UPDATEPROFILE handler
Created Date Nov 9, 2023 4:55:50 PM...
2020-06: Out-of-Cycle Advisory: Pulse Secure Client TOCTOU Privilege Escalation Vulnerability (CVE-2020-13162)
Last Modified Date Aug 24, 2026 12:00:16 AM...
Security Advisory Ivanti Endpoint Manager (EPM) October 2025
Security Advisory Ivanti Endpoint Manager EPM October 2025 Multiple CVEs Summary Update Nov. 11, 2025: A fix has been released for CVE-2025-11622 and CVE-2025-9713. To resolve these vulnerabilities customers should update to EPM 2024 SU4. Update Feb. 10, 2026: A fix to resolve the remaining CVE's...
Security Advisory September 2025 for Ivanti EPM 2024 SU3 and EPM 2022 SU8
Security Advisory Ivanti Endpoint Manager CVE-2025-9712, CVE-2025-9872 Summary Ivanti has released updates for Ivanti Endpoint Manager EPM which addresses high severity vulnerabilities. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure...
Security Advisory Velocity License Server (CVE-2024-9167)
Summary Ivanti has released updates for the Velocity License Server which addresses a high-severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...
Security Advisory EPM September 2024 for EPM 2024 and EPM 2022
Update Regarding Ivanti EPM Endpoint Manager Downloads As part of our ongoing efforts to enhance your experience and streamline our processes we have migrated the software downloads from the Ivanti Community to the Ivanti License System ILS. You will continue to use your current Ivanti Single...
Security Advisory EPM July 2024 for EPM 2024
Created Date Jul 16, 2024 4:16:53 PM...
Security Advisory CVE-2024-37403 (Dirty Stream) for Ivanti Docs@Work for Android
Created Date Jul 16, 2024 4:15:18 PM...
Avalanche 6.4.3.602 - additional security hardening and CVE fixed
Created Date May 13, 2024 6:32:03 PM...
SA: CVE-2023-46808 (Authenticated Remote File Write) for Ivanti Neurons for ITSM
Created Date Mar 20, 2024 2:26:49 AM...
CVE-2023-46805 (Authentication Bypass) & CVE-2024-21887 (Command Injection) for Ivanti Connect Secure and Ivanti Policy Secure Gateways
DESCRIPTION: Vulnerabilities have been discovered in Ivanti Connect Secure ICS, formerly known as Pulse Connect Secure and Ivanti Policy Secure gateways. These vulnerabilities impact all supported versions – Version 9.x and 22.x refer to Granular Software Release EOL Timelines and Support Matrix...
CVE-2023-39337 - MobileConfig profile download authentication bypass
Created Date Nov 9, 2023 4:55:41 PM...
SA40196 - [Pulse Secure] Badlock security advisory (CVE-2016-2118)
Last Modified Date Aug 24, 2026 12:34:40 AM...
SA43877 - 2018-08 Security Bulletin: Multiple vulnerabilities resolved in Pulse Connect Secure / Pulse Policy Secure / Pulse Secure Desktop 9.0R1/9.0R2
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. This advisory provides information about multiple vulnerabilities resolved in Pulse Connect Secure and Pulse Policy Secure 9.0R1 & Pulse Desktop Client 9.0R2 releases. These issues app...
Security Advisory Ivanti Xtraction (CVE-2026-14902, CVE-2026-14903)
Last Modified Date Aug 23, 2026 9:09:38 PM...
Security Advisory Ivanti Avalanche (CVE-2025-8296, CVE-2025-8297)
Summary Ivanti has released updates for Ivanti Avalanche which addresses two high severity vulnerabilities. Successful exploitation could lead to authenticated remote code execution. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerabilit...
Impact Of CVE-2025-32462, CVE-2025-32463 On Ivanti EPMM and Sentry
Created Date Jul 7, 2025 8:33:20 AM...
December 2024 Security Advisory Ivanti Automation (CVE-2024-9845)
Summary Ivanti has released updates for Automation which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CVE Numbe...
CVE-2023-41724 (Remote Code Execution) for Ivanti Standalone Sentry
Last Modified Date Mar 25, 2024 2:23:40 PM...
CVE-2024-22024 (XXE) for Ivanti Connect Secure and Ivanti Policy Secure
Executive Summary: As part of the ongoing investigation, we discovered a new vulnerability as part of our internal review and testing of our code, which was also responsibly disclosed by watchTowr. This vulnerability only affects a limited number of supported versions – Ivanti Connect Secure...
SA-2023-12-19-CVE-2023-39336
SECURITY ADVISORY 2023-12-19 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for EPM 2022 SU4 and all prior versions. More information can be found here: CVE-2023-39336 Full details Please log into the community to access the full details page. Vulnerability...
Security fixes included in the latest Ivanti Secure Access Client Release
Last Modified Date Nov 16, 2023 2:01:28 PM...
KB API Authentication Bypass on Sentry Administrator Interface - CVE-2023-38035
Last Modified Date Sep 5, 2023 9:01:44 AM...
ZDI-CAN-17729 - CVE-2023-28125 - Bug 958437: ZDI-CAN-17729: Ivanti Avalanche InfoRail Authentication Bypass Vulnerability
Last Modified Date 2024-3-8 16:51:05...
JSA10645 - 2014-09 Security Bulletin: Pulse Connect Secure (PSC) and Pulse Policy Secure (PPS): Cross site scripting issue (CVE-2014-3820)
Last Modified Date Aug 24, 2026 12:34:43 AM...
SA44114 - 2019-04: Out-of-Cycle Advisory: Pulse Desktop Client and Network Connect improper handling of session cookies (CVE-2019-11213)
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Under certain conditions, the Pulse Desktop Client and Network Connect could allow an attacker to access session tokens to replay and spoof sessions, and as a result, gain unauthorized...
SA44800 - 2021-05: Out-of-Cycle Advisory: Pulse Connect Secure Buffer Overflow Vulnerability
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A vulnerability was discovered under Pulse Connect Secure PCS. This includes buffer overflow vulnerability on the Pulse Connect Secure gateway that allows a remote authenticated user...
SA44676 - December 08 2020 OpenSSL Security Advisory
Last Modified Date Dec 15, 2023 5:32:46 PM...
Security Advisory Ivanti Neurons for ITSM (CVE-2026-4913, CVE-2026-4914)
Last Modified Date Aug 23, 2026 9:35:37 PM...
Urgent Reminder to Update Edge Appliances During Peak Holiday Time-off
Last Modified Date Aug 23, 2026 10:03:11 PM...
Security Advisory EPM November 2025 for EPM 2024
Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses three high vulnerabilities. Successful exploitation could allow a local authenticated attacker to write arbitrary files anywhere on disk. Two of the resolved vulnerabilities, CVE-2025-9713 and CVE-2025-11622, were...
September Security Advisory Ivanti Connect Secure, Policy Secure, ZTA Gateways and Neurons for Secure Access (Multiple CVEs)
Update 10 Sept Ivanti Policy Secure: Affected and Resolved in Versions updated Summary Ivanti has released updates for Ivanti Connect Secure, Policy Secure, ZTA Gateways and Neurons for Secure Access which addresses six medium and five high vulnerabilities. We are not aware of any customers being...
Security Advisory Ivanti Workspace Control (IWC)
Summary Ivanti has released a version of a new product architecture for Ivanti Workspace Control IWC which addresses high and critical vulnerabilities. Successful exploitation could lead to an escalation of privileges and lateral movement. IWC is intended to be a non-internet facing product, and...
Security Advisory Ivanti Cloud Service Appliance (CSA) (CVE-2024-8190)
Summary Ivanti has released a security update for Ivanti CSA 4.6 which addresses a high severity vulnerability. Successful exploitation could lead to unauthorized access to the device running the CSA. Dual-homed CSA configurations with eth0 as an internal network, as recommended by Ivanti, are at...
SA-2024-07-12-CVE-2024-29821
SECURITY ADVISORY 07-12-2024 Product Affected: Ivanti Desktop and Server Management A vulnerability was recently discovered in DSM. This vulnerability is remediated in DSM 2024.2. Vulnerability Information CVE | CVSS | Summary | Product Affected ---|---|---|--- CVE-2024-29821 CVE Reserved | 7.8...
Security Advisory EPMM May 2024
Created Date May 15, 2024 8:38:38 PM...
Security Patch Release - Ivanti Policy Secure 22.6R1
Last Modified Date Aug 23, 2026 9:54:42 PM...
CVE-2023-38035 – API Authentication Bypass on Sentry Administrator Interface
Last Modified Date Aug 23, 2026 11:52:15 PM...
JSA10628 - 2014-06 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS): Weak SSL cipher allowed unexpectedly when higher level cipher group is configured (CVE-2014-3812)
Last Modified Date Aug 24, 2026 12:34:44 AM...
SA40007 - 2014-09 Security Bulletin: Pulse Connect Secure (PCS) and Pulse Secure Desktop client: User privilege escalation issue in Installer Service (CVE-2014-3811)
Last Modified Date Aug 24, 2026 12:35:24 AM...
SA40166 - Remote desktop protocol (RDP) client restriction bypass issue
Ivanti 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A security issue was discovered in the PCS Terminal Services Remote Desktop Protocol RDP client session restrictions feature. By exploiting this issue a malicious authenticated user...