Approved changes feed: RSS · Atom
cpe:2.3:a:ivanti:sentry:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ivanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129) |
|---|---|
| Product | Sentry (7c06157b-8ac2-5040-89e5-3c39c9b7aea3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-10523 |
not_vulnerable | 2026-07-29 00:20:52.010760 |
Details available
CRITICAL (9.9)
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
Published: 2026-06-09T14:16:41.255Z
Updated: 2026-06-10T03:58:55.720Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-10520 |
not_vulnerable | 2026-07-29 00:20:52.003334 |
Details available
CRITICAL (10)
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution
Published: 2026-06-09T14:10:21.581Z
Updated: 2026-06-12T03:55:15.947Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8540 |
not_vulnerable | 2026-06-08 07:00:24.902376 |
Details available
HIGH (8.8)
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components.
Published: 2024-12-10T18:52:17.010Z
Updated: 2024-12-14T04:55:18.267Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41724 |
vulnerable | 2026-06-08 06:11:06.806875 |
Details available
CRITICAL (9.6)
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.
Published: 2024-03-31T01:45:42.684Z
Updated: 2025-03-25T14:36:27.737Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39338 |
vulnerable | 2026-06-08 06:09:37.080246 |
Details available
MEDIUM (6.8)
Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access.
Published: 2025-07-12T03:30:40.285Z
Updated: 2026-02-26T17:50:42.704Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.