Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:dsm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductDsm (23823d84-6af7-569d-a93c-de542e1ecba7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38648 vulnerable 2026-06-03 14:56:19.202345 Details available
CRITICAL (9)
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.
Published: 2025-07-12T03:30:40.276Z
Updated: 2025-07-14T16:12:29.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29821 vulnerable 2026-06-03 14:55:27.508969 Details available
HIGH (7.8)
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
Published: 2024-10-18T23:06:49.553Z
Updated: 2024-10-21T17:17:21.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29213 vulnerable 2026-06-03 14:55:27.113716 Details available
HIGH (7.8)
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
Published: 2024-10-18T23:06:49.569Z
Updated: 2024-10-21T17:16:00.310Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.