CISA Known Exploited Vulnerabilities
36 vulnerabilities with confirmed active exploitation.
| CVE | Vendor | Product | CVSS | EPSS | Added | Due | Flags |
|---|---|---|---|---|---|---|---|
CVE-2026-104935 |
Ivanti | Connect Secure | — | 0.8677 | 2026-10-13 | 2026-10-16 | |
CVE-2026-10520 |
Ivanti | Sentry | — | 0.9991 | 2026-06-11 | 2026-06-14 | |
CVE-2026-6973 |
Ivanti | Endpoint Manager Mobile (EPMM) | 7.2 | 0.3445 | 2026-05-07 | 2026-05-10 | |
CVE-2026-1340 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.9864 | 2026-04-08 | 2026-04-11 | |
CVE-2026-1603 |
Ivanti | Endpoint Manager (EPM) | — | 0.8833 | 2026-03-09 | 2026-03-23 | |
CVE-2026-1281 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.9869 | 2026-01-29 | 2026-02-01 | |
CVE-2025-4428 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.8800 | 2025-05-19 | 2025-06-09 | |
CVE-2025-4427 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.9993 | 2025-05-19 | 2025-06-09 | |
CVE-2025-22457 |
Ivanti | Connect Secure, Policy Secure, and ZTA Gateways | — | 0.9998 | 2025-04-04 | 2025-04-11 | RW |
CVE-2024-13161 |
Ivanti | Endpoint Manager (EPM) | — | 0.8981 | 2025-03-10 | 2025-03-31 | |
CVE-2024-13160 |
Ivanti | Endpoint Manager (EPM) | — | 0.9099 | 2025-03-10 | 2025-03-31 | |
CVE-2024-13159 |
Ivanti | Endpoint Manager (EPM) | — | 0.9999 | 2025-03-10 | 2025-03-31 | |
CVE-2025-0282 |
Ivanti | Connect Secure, Policy Secure, and ZTA Gateways | — | 0.9998 | 2025-01-08 | 2025-01-15 | RW |
CVE-2024-9380 |
Ivanti | Cloud Services Appliance (CSA) | — | 0.5832 | 2024-10-09 | 2024-10-30 | |
CVE-2024-9379 |
Ivanti | Cloud Services Appliance (CSA) | — | 0.4427 | 2024-10-09 | 2024-10-30 | |
CVE-2024-29824 |
Ivanti | Endpoint Manager (EPM) | — | 0.9994 | 2024-10-02 | 2024-10-23 | |
CVE-2024-7593 |
Ivanti | Virtual Traffic Manager | — | 1.0000 | 2024-09-24 | 2024-10-15 | |
CVE-2024-8963 |
Ivanti | Cloud Services Appliance (CSA) | — | 0.9861 | 2024-09-19 | 2024-10-10 | |
CVE-2024-8190 |
Ivanti | Cloud Services Appliance | — | 0.8853 | 2024-09-13 | 2024-10-04 | |
CVE-2021-44529 |
Ivanti | Endpoint Manager Cloud Service Appliance (EPM CSA) | — | — | 2024-03-25 | 2024-04-15 | RW |
CVE-2024-21893 |
Ivanti | Connect Secure, Policy Secure, and Neurons | — | 1.0000 | 2024-01-31 | 2024-02-02 | RW |
CVE-2023-35082 |
Ivanti | Endpoint Manager Mobile (EPMM) and MobileIron Core | — | 1.0000 | 2024-01-18 | 2024-02-08 | RW |
CVE-2023-46805 |
Ivanti | Connect Secure and Policy Secure | — | 0.9998 | 2024-01-10 | 2024-01-22 | RW |
CVE-2024-21887 |
Ivanti | Connect Secure and Policy Secure | — | 1.0000 | 2024-01-10 | 2024-01-22 | RW |
CVE-2023-38035 |
Ivanti | Sentry | — | 0.9995 | 2023-08-22 | 2023-09-12 | RW |
CVE-2023-35081 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 0.6358 | 2023-07-31 | 2023-08-21 | |
CVE-2023-35078 |
Ivanti | Endpoint Manager Mobile (EPMM) | — | 1.0000 | 2023-07-25 | 2023-08-15 | RW |
CVE-2020-15505 |
Ivanti | MobileIron Multiple Products | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2021-22893 |
Ivanti | Pulse Connect Secure | — | — | 2021-11-03 | 2022-05-03 | RW |
CVE-2020-8243 |
Ivanti | Pulse Connect Secure | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2021-22900 |
Ivanti | Pulse Connect Secure | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2021-22894 |
Ivanti | Pulse Connect Secure | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2020-8260 |
Ivanti | Pulse Connect Secure | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2021-22899 |
Ivanti | Pulse Connect Secure | — | — | 2021-11-03 | 2022-05-03 | |
CVE-2019-11510 |
Ivanti | Pulse Connect Secure | — | — | 2021-11-03 | 2022-05-03 | RW |
CVE-2019-11539 |
Ivanti | Pulse Connect Secure and Pulse Policy Secure | — | — | 2021-11-03 | 2022-05-03 | RW |