Advisories · Technology

Ivanti ITSM.

Every CVE that names Ivanti ITSM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-7570 CVE record

CVSS 8.3 High

Improper certificate validation in Ivanti ITSM
- Ivanti ITSM
- Weak cryptography or TLS
Not analysed yet 13 Aug 2024
CVE-2024-7569 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Insecure storage of sensitive information in Ivanti ITSM
- Ivanti ITSM
- Information disclosure
- CWE-215
Not analysed yet 13 Aug 2024
CVE-2024-22059 CVE record

CVSS 8.8 High

SQL injection in Ivanti ITSM
- Ivanti ITSM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-22060 CVE record

CVSS 8.7 High

Unrestricted file upload in Ivanti ITSM
- Ivanti ITSM
- Unrestricted file upload
Not analysed yet 31 May 2024
CVE-2023-46808 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Unrestricted file upload in Ivanti ITSM
- Ivanti ITSM
- Unrestricted file upload
Not analysed yet 31 Mar 2024