Desktop & Server Management (Ivanti) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2026-03-10. Vendor: Ivanti.

CVEs of Desktop & Server Management

• CVE-2026-3483 - CVSS 7.8 (high), 2026-03-10: An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.
• CVE-2024-38648 - CVSS 9 (critical), 2025-07-12: A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.
• CVE-2024-7572 - CVSS 7.1 (high), 2024-12-10: Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files.
• CVE-2024-29821 - CVSS 7.8 (high), 2024-10-18: Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack…
• CVE-2024-29213 - CVSS 7.8 (high), 2024-10-18: Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack…
• CVE-2023-28129 - CVSS 7.8 (high), 2023-08-10: DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.