ivanti endpoint manager mobile

Name: ivanti endpoint manager mobile
Brand: ivanti

productUS

cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical6high3medium0low

updated 2026-10-27

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-35082US	critical9.8OT critical	100.0% (100th)	KEV	11.11.0	2023-08-15	< 11.11.0
CVE-2023-35078US	critical9.8OT critical	100.0% (100th)	KEV	11.10.0.2	2023-07-25	3 versions
CVE-2025-4427US	high7.5OT critical	99.9% (100th)	KEV	12.4.0.2	2025-05-13	4 versions
CVE-2026-1281US	—OT critical	98.7% (100th)	KEV	no fix	2026-01-29	5 versions
CVE-2026-1340US	—OT critical	98.6% (100th)	KEV	no fix	2026-01-29	≤ 12.7.0.0
CVE-2025-4428US	high8.8OT critical	88.0% (100th)	KEV	12.4.0.2	2025-05-13	4 versions
CVE-2023-35081US	high7.2OT critical	63.6% (99th)	KEV	11.8.1.2	2023-08-03	3 versions
CVE-2026-6973US	—OT critical	34.5% (98th)	KEV	12.6.1.1	2026-05-07	3 versions
CVE-2024-22026US	medium6.7	1.10% (65th)	Exploit	12.1.0.0	2024-05-22	< 12.1.0.0
CVE-2025-6771US	—	23.0% (98th)	—	12.3.0.3	2025-07-08	3 versions
CVE-2025-10985US	—	20.4% (97th)	—	12.6.0.2	2025-10-14	3 versions
CVE-2025-10243US	—	20.4% (97th)	—	12.5.0.4	2025-10-14	3 versions
CVE-2025-10242US	—	20.4% (97th)	—	12.6.0.2	2025-10-14	3 versions
CVE-2025-6770US	—	19.5% (97th)	—	12.3.0.3	2025-07-08	3 versions
CVE-2026-5786US	—	11.2% (96th)	—	12.6.1.1	2026-05-07	3 versions
CVE-2024-36131US	high8.8	2.29% (83rd)	—	12.1.0.1	2024-08-07	< 12.1.0.1
CVE-2023-39335US	critical9.8	2.28% (83rd)	—	11.9.0	2023-11-15	3 versions
CVE-2024-36130US	critical9.8	2.25% (83rd)	—	12.1.0.1	2024-08-07	< 12.1.0.1
CVE-2023-39337US	critical9.1	1.90% (79th)	—	11.10.0.4	2023-11-15	3 versions
CVE-2024-36132US	high7.5	1.25% (69th)	—	12.1.0.1	2024-08-07	< 12.1.0.1
CVE-2026-18851US	—OT elevated	1.21% (68th)	—	12.9.0.2	2026-09-08	3 versions
CVE-2023-46807US	—	1.05% (64th)	—	12.1.0.0	2024-05-22	< 12.1.0.0
CVE-2023-46806US	—	0.97% (62nd)	—	12.1.0.0	2024-05-22	< 12.1.0.0
CVE-2024-34788US	medium6.5	0.94% (61st)	—	12.1.0.1	2024-08-07	< 12.1.0.1
CVE-2026-5788US	critical9.8	0.82% (57th)	—	12.6.1.1	2026-05-07	3 versions
CVE-2026-5787US	critical9.1	0.69% (52nd)	—	12.6.1.1	2026-05-07	3 versions
CVE-2025-10986US	medium5.5	0.62% (49th)	—	12.4.0.4	2025-10-14	3 versions
CVE-2026-7821US	critical9.1	0.51% (43rd)	—	12.6.1.1	2026-05-07	3 versions
CVE-2024-7612US	high7.8	0.24% (15th)	—	12.1.0.4	2024-10-08	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-287Improper Authentication5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5 CVEs
CWE-284Improper Access Control3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-295Improper Certificate Validation2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan