DS
Product
Desktop & Server Management
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 1Low 0
Watch
Add Desktop & Server Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-12441 | 9.8 | Aug 6 | Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent Affected: before 2020.1 |
| CVE-2026-3483 | 7.8 | Mar 10 | An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges Affected: before 2026.1.1 |
| CVE-2024-29821 | 7.8 | Oct 18 | Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector Affected: before 2024.2 |
| CVE-2024-29213 | 7.8 | Oct 18 | Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector Affected: before 2024.2 |
| CVE-2023-28129 | 7.8 | Aug 10 | DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user Affected: before 2022.2; 2022.2; 2022.2; 2022.2 |
| CVE-2024-7572 | 7.1 | Dec 10 | Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files Affected: 2024.2 before 2024.3.5740 |
| CVE-2024-38648 | 5.7 | Jul 12 | A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials Affected: before 2024.2 |
Showing 7