Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Desktop_\&_server_management
(Ivanti)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 5 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2025-07-12 | CVE-2024-38648 | A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials. | Desktop_\&_server_management | 5.7 | ||
| 2024-12-10 | CVE-2024-7572 | Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files. | Desktop_\&_server_management | N/A | ||
| 2024-10-18 | CVE-2024-29213 | Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector. | Desktop_\&_server_management | N/A | ||
| 2024-10-18 | CVE-2024-29821 | Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector. | Desktop_\&_server_management | N/A | ||
| 2023-08-10 | CVE-2023-28129 | DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user. | Desktop_\&_server_management | 7.8 |