Ivanti: known exploited vulnerabilities
Generated from CISA's catalogue of known exploited vulnerabilities as of 3 November 2026.
From CISA's catalogue, 21 entries in Ivanti that Vardion has a check for. The newest first.
| CVE | Product | Since | |
|---|---|---|---|
| CVE-2026-10520 | Ivanti Sentry | ||
| CVE-2026-1340 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2026-1603 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2026-1281 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2025-4427 | Ivanti Endpoint Manager Mobile (EPMM) | ||
| CVE-2024-13161 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-13160 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-13159 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2025-0282 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways | Ransomware | |
| CVE-2024-29824 | Ivanti Endpoint Manager (EPM) | ||
| CVE-2024-7593 | Ivanti Virtual Traffic Manager | ||
| CVE-2024-8963 | Ivanti Cloud Services Appliance (CSA) | ||
| CVE-2021-44529 | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) | Ransomware | |
| CVE-2024-21893 | Ivanti Connect Secure, Policy Secure, and Neurons | Ransomware | |
| CVE-2023-35082 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core | Ransomware | |
| CVE-2024-21887 | Ivanti Connect Secure and Policy Secure | Ransomware | |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure | Ransomware | |
| CVE-2023-38035 | Ivanti Sentry | Ransomware | |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile (EPMM) | Ransomware | |
| CVE-2020-15505 | Ivanti MobileIron Multiple Products | ||
| CVE-2019-11510 | Ivanti Pulse Connect Secure | Ransomware |
Know before an attacker does
Vardion scans the servers and websites you approve on the schedule you set. A known exploited vulnerability it finds goes to the top of the fix list.