FEDRAMP CATALOG › Ivanti Neurons for MDM (Formerly MobileIron)

Ivanti Neurons for MDM (Formerly MobileIron)

Ivanti · package F1507116930

Current status Authorized · Moderate impact · since 2026-07-07 Service modelSaaS MarketplaceRev5 · source: marketplace Security posture 19 critical 23 high 35 on KEV · 42 correlated CVEs

CMMC DOMAINS ADDRESSED

MP · Media Protection IA · Identification and Authentication SC · System and Communications Protection CM · Configuration Management

STATUS TIMELINE · SCD2

STATUS	IMPACT	FROM	TO
Authorized	Moderate	2026-07-07	current

AUTHORIZATIONS

AGENCY	TYPE	DATE
Department of Energy	Agency	2018-03-08

EXPOSED CVEs · CORRELATED TO THIS PRODUCT all exposures

SEVERITY	CVE	TITLE	PUBLISHED
HIGH	CVE-2026-10520	Ivanti Sentry OS Command Injection Vulnerability	2026-06-11
CRITICAL	CVE-2026-10523	CVE-2026-10523: An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10	2026-06-09
HIGH	CVE-2026-6973	Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability	2026-05-07
HIGH	CVE-2026-1340	Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability	2026-04-08
HIGH	CVE-2026-1603	Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability	2026-03-09
HIGH	CVE-2026-1281	Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability	2026-01-29
HIGH	CVE-2025-4427	Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability	2025-05-19
HIGH	CVE-2025-4428	Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability	2025-05-19
CRITICAL	CVE-2025-22457	Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability	2025-04-04
CRITICAL	CVE-2025-22457	CVE-2025-22457: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6,	2025-04-03
HIGH	CVE-2024-13159	Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability	2025-03-10
HIGH	CVE-2024-13160	Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability	2025-03-10
HIGH	CVE-2024-13161	Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability	2025-03-10
CRITICAL	CVE-2025-0282	CVE-2025-0282: A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5,	2025-01-08
CRITICAL	CVE-2025-0282	Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability	2025-01-08
HIGH	CVE-2024-9379	Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability	2024-10-09
HIGH	CVE-2024-9380	Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability	2024-10-09
HIGH	CVE-2024-29824	Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability	2024-10-02
HIGH	CVE-2024-7593	Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability	2024-09-24
HIGH	CVE-2024-8963	Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability	2024-09-19
HIGH	CVE-2024-8190	Ivanti Cloud Services Appliance OS Command Injection Vulnerability	2024-09-13
CRITICAL	CVE-2021-44529	Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability	2024-03-25
CRITICAL	CVE-2024-21893	Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability	2024-01-31
CRITICAL	CVE-2023-35082	Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability	2024-01-18
CRITICAL	CVE-2024-21887	CVE-2024-21887: A command injection vulnerability in web components of Ivanti Connect Secure (9.	2024-01-12
CRITICAL	CVE-2023-46805	Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability	2024-01-10
CRITICAL	CVE-2024-21887	Ivanti Connect Secure and Policy Secure Command Injection Vulnerability	2024-01-10
CRITICAL	CVE-2023-38035	Ivanti Sentry Authentication Bypass Vulnerability	2023-08-22
HIGH	CVE-2023-35081	Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability	2023-07-31
CRITICAL	CVE-2023-35078	CVE-2023-35078: An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users	2023-07-25
CRITICAL	CVE-2023-35078	Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability	2023-07-25
CRITICAL	CVE-2021-44529	CVE-2021-44529: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA)	2021-12-08
CRITICAL	CVE-2019-11510	Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability	2021-11-03
CRITICAL	CVE-2019-11539	Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability	2021-11-03
HIGH	CVE-2020-15505	Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability	2021-11-03
HIGH	CVE-2020-8243	Ivanti Pulse Connect Secure Code Execution Vulnerability	2021-11-03
HIGH	CVE-2020-8260	Ivanti Pulse Connect Secure Code Execution Vulnerability	2021-11-03
CRITICAL	CVE-2021-22893	Ivanti Pulse Connect Secure Use-After-Free Vulnerability	2021-11-03
HIGH	CVE-2021-22894	Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability	2021-11-03
HIGH	CVE-2021-22899	Ivanti Pulse Connect Secure Command Injection Vulnerability	2021-11-03
HIGH	CVE-2021-22900	Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability	2021-11-03
CRITICAL	CVE-2021-22893	CVE-2021-22893: Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication b	2021-04-23