Safeguard
Tag

ivanti

Safeguard articles tagged "ivanti" — guides, analysis, and best practices for software supply chain and application security.

43 articles

Vulnerability Analysis

CVE-2024-21887: Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

CVE-2024-21887 affects Ivanti Connect Secure and Policy Secure and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-10.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2023-46805: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

CVE-2023-46805 affects Ivanti Connect Secure and Policy Secure and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-10.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

CVE-2023-35082 affects Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-18.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

CVE-2024-21893 affects Ivanti Connect Secure, Policy Secure, and Neurons and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-31.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

CVE-2021-44529 affects Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-03-25.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-8190: Ivanti Cloud Services Appliance OS Command Injection Vulnerability

CVE-2024-8190 affects Ivanti Cloud Services Appliance and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-09-13.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-8963: Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

CVE-2024-8963 affects Ivanti Cloud Services Appliance (CSA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-09-19.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

CVE-2024-7593 affects Ivanti Virtual Traffic Manager and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-09-24.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-29824: Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

CVE-2024-29824 affects Ivanti Endpoint Manager (EPM) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-02.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

CVE-2024-9379 affects Ivanti Cloud Services Appliance (CSA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-09.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

CVE-2024-9380 affects Ivanti Cloud Services Appliance (CSA) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-09.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2025-0282: Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2025-0282 affects Ivanti Connect Secure, Policy Secure, and ZTA Gateways and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-01-08.

Sep 17, 20263 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.