Known vulnerabilities in Virtual Application Delivery Controller (formerly Virtual Traffic Manager)
Vendor:
Ivanti
Software CPE:
cpe:2.3:a:ivanti:virtual_traffic_manager:*:*:*:*:*:*:*:*
Website:
https://www.ivanti.com/
Total vulnerabilities:
4
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
22.9r5
22.9r4
22.9r3
22.9r2
22.9r1
22.8R1
22.3R1
22.1
22.7R4
22.9
22.8R2
22.7R2
22.6R2
22.5R2
22.3R3
22.2R1
22.7R1
22.6R1
22.5R1
22.3R2
22.3
22.2
21.1
20.3. r1
20.3
20.2 r1
20.2
20.1 r2
20.1 r1
20.1
19.3
19.2 r4
19.2 r3
19.2 r2
19.2 r1
19.2
19.1
18.3 r1
18.3
18.2 r3
18.2 r2
18.2 r1
18.2
18.1
17.4
17.3
17.2 r3
17.2 r2
17.2 r1
10.4 r3
10.4 r2
9.9 r3
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131191 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2026-8051 |
CWE-78 | Low | 22.9r4 | 12.05.2026 |
SB2026051289 |
||
| #VU113829 - Missing Authorization CVE-2025-8310 |
CWE-862 | Medium | 22.9 | 12.08.2025 |
SB2025081241 |
||
| #VU95992 - Incorrect Implementation of Authentication Algorithm CVE-2024-7593 |
CWE-303 | High | 22.2R1, 22.3R3, 22.5R2, 22.6R2, 22.7R2 | 14.08.2024 |
SB2024081435 |
||
| #VU53124 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-31922 |
CWE-444 | Medium | 18.2 r3, 19.2 r4, 20.1 r2, 20.2 r1, 20.3 r1 | 11.05.2021 |
SB2021051142 |