Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-38648 1 Ivanti 1 Desktop \& Server Management 2025-07-17 5.7 Medium
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.
CVE-2023-28129 1 Ivanti 1 Desktop \& Server Management 2024-11-21 7.8 High
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.