Ivanti

Ivanti develops a focused line of enterprise mobility, endpoint management, and secure remote access platforms that occupy critical positions in corporate IT infrastructure and are widely deployed across business networks. Despite its concentrated product portfolio—anchored by Connect Secure, Avalanche, Endpoint Manager, Policy Secure, and Endpoint Manager Mobile—the vendor carries a large vulnerability footprint and ranks among the most prominent in the landscape, reflecting the complexity and attack surface inherent to these privileged management and access-control systems. Vulnerabilities affecting Ivanti skew toward serious outcomes and have a moderate tendency toward both confirmed in-the-wild exploitation and public exploit availability, consistent with the high value of compromising endpoint and access-control infrastructure. The exposure recurs through SQL injection, path traversal, out-of-bounds write, and cross-site scripting weaknesses, reflecting the web-facing and data-handling demands of remote access and management appliances. Defenders should prioritize inventory and patching of these products, particularly internet-reachable instances; current exploitation activity and exposure counts are shown alongside this summary.