Browse all 390 CVE security advisories affecting Ivanti. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Ivanti provides enterprise IT service management and endpoint management solutions, primarily facilitating workflow automation and device control for large organizations. The company’s software portfolio has historically been a significant target for attackers, resulting in a substantial record of 358 Common Vulnerabilities and Exposures. These security flaws frequently involve critical classes such as remote code execution, cross-site scripting, and privilege escalation, often stemming from complex integrations within its service management platforms. A notable incident occurred in 2021 when the SambaCry vulnerability allowed unauthenticated remote code execution, compromising thousands of systems globally. This event underscored the risks associated with legacy codebases and insufficient patch management cycles. Consequently, Ivanti has faced intense scrutiny regarding its development practices and incident response capabilities, prompting industry-wide recommendations for immediate isolation and rigorous vulnerability scanning of affected endpoints to mitigate potential data breaches and operational disruptions.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-11771 | Ivanti CSA 路径遍历漏洞 — Cloud Services Application CWE-22 | 5.3 | Medium | 2025-02-11 |
| CVE-2024-47908 | Ivanti CSA 操作系统命令注入漏洞 — Cloud Services Application CWE-78 | 9.1 | Critical | 2025-02-11 |
| CVE-2024-11773 | Ivanti CSA 安全漏洞 — Cloud Services Application CWE-89 | 9.1 | Critical | 2024-12-10 |
| CVE-2024-11772 | Ivanti CSA 安全漏洞 — Cloud Services Application CWE-77 | 9.1 | Critical | 2024-12-10 |
| CVE-2024-11639 | Ivanti CSA 安全漏洞 — Cloud Services Application CWE-288 | 10.0 | Critical | 2024-12-10 |
This page lists every published CVE security advisory associated with Ivanti. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.