A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.
An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker with access to the internal network to execute arbitrary SQL queries and retrieve output without the need for authentication. Under specific circumstances, this may also lead to RCE on the core server.
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
CVE-2023-35082 is a critical authentication bypass vulnerability affecting Ivanti EPMM version 11.10 and earlier. It allows unauthenticated attackers to gain unauthorized access to restricted application functionality and resources without proper authentication. The vulnerability has a CVSS score of 10.0, indicating maximum severity with full impact on confidentiality, integrity, and availability. No user interaction or privileges are required to exploit this flaw, and it affects all network-accessible instances of the vulnerable software. Although no known exploits are currently reported in the wild, the vulnerability poses a significant risk to organizations using Ivanti EPMM for endpoint and mobile device management. European organizations relying on Ivanti EPMM should prioritize patching or mitigating this issue to prevent potential compromise. Countries with higher adoption of Ivanti products and critical infrastructure managed via EPMM are at greater risk. Immediate mitigation steps include restricting network access to the management interface, applying vendor patches when available, and monitoring for suspicious activity related to unauthorized access attempts.
CVE-2023-35078 is a critical authentication bypass vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that allows attackers to access restricted application functionality and resources without any authentication. The vulnerability has a CVSS score of 10, indicating maximum severity, with complete compromise of confidentiality, integrity, and availability possible. No user interaction or privileges are required to exploit this flaw, and it affects all versions of the product. While no public exploits are currently known, the vulnerability poses a significant risk to organizations using Ivanti EPMM for mobile device management. European organizations relying on this product for endpoint security could face unauthorized access, data breaches, and operational disruption. Immediate patching or mitigation is critical, though no patches are currently listed. Organizations should implement network-level restrictions, monitor for anomalous access, and consider compensating controls until a fix is available. Countries with high adoption of Ivanti EPMM and critical infrastructure reliance on mobile device management, such as Germany, the UK, France, and the Netherlands, are most at risk.
CVE-2019-11539 is a command injection vulnerability in Ivanti Pulse Connect Secure and Pulse Policy Secure. It allows an authenticated attacker with access to the admin web interface to inject and execute arbitrary commands. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2019-11510 is an arbitrary file read vulnerability in Ivanti Pulse Connect Secure that allows unauthenticated remote attackers with network access via HTTPS to read arbitrary files by sending a specially crafted URI. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
Ivanti Pulse Connect Secure contains a command injection vulnerability (CVE-2021-22899) that allows remote authenticated users to execute arbitrary code via Windows File Resource Profiles. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2020-8260 is a high-severity vulnerability in Ivanti Pulse Connect Secure that allows an authenticated attacker to execute arbitrary code by exploiting uncontrolled gzip extraction. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2021-22894 is a buffer overflow vulnerability in Ivanti Pulse Connect Secure Collaboration Suite that allows remote authenticated users to execute code with root privileges by exploiting a specially crafted meeting room. This vulnerability has been exploited in the wild and is considered high severity.
Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability (CVE-2021-22900) that allows an authenticated administrator to upload maliciously crafted archives via the administrator web interface, resulting in arbitrary file writes. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2020-8243 is a high-severity vulnerability in Ivanti Pulse Connect Secure's admin web interface. It allows an authenticated attacker to upload a custom template that can lead to code execution on the affected system. This vulnerability has been exploited in the wild.
CVE-2021-22893 is a use-after-free vulnerability in Ivanti Pulse Connect Secure that allows remote, unauthenticated attackers to execute code via license services. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. The affected product is Ivanti Pulse Connect Secure. No specific affected versions or patch information is provided in the input data.
CVE-2020-15505 is a high-severity remote code execution vulnerability affecting multiple Ivanti MobileIron products including Core & Connector, Sentry, and Monitor and Reporting Database (RDB). The vulnerability allows an attacker to execute arbitrary code remotely. It has been exploited in the wild. No specific affected versions or patch information are provided.
