Advisories · Technology
Ivanti ICS.
Every CVE that names Ivanti ICS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.3 HighCritical · CVSS 7+ and EPSS
XML external entity injection in Ivanti ICS and others
- Ivanti ICS
- Ivant ICS
- XML external entities (XXE)
- CVSS 8.2 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Server-side request forgery in Ivanti ICS and others
- Ivanti ICS
- Ivanti IPS
- Server-side request forgery (SSRF)
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Improper privilege management in Ivanti ICS and others
- Ivanti ICS
- Ivanti IPS
- Privilege escalation
- CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Command injection in Ivanti ICS and others
- Ivanti ICS
- Ivanti IPS
- Command injection
- CVSS 8.2 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Ivanti ICS: An authentication bypass vulnerability in the web component of Ivanti ICS 9.x…
- Ivanti ICS
- Ivanti IPS