Dsm (Ivanti) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-07-12. Vendor: Ivanti.

CVEs of Dsm

• CVE-2024-38648 - CVSS 9 (critical), 2025-07-12: A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.
• CVE-2024-29213 - CVSS 7.8 (high), 2024-10-18: Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack…
• CVE-2024-29821 - CVSS 7.8 (high), 2024-10-18: Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack…