CVE-2023-28129: Ivanti Desktop & Server Management

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.

Affected products

• Ivanti Desktop & Server Management: before 2022.2 (fixed in 2022.2); version 2022.2 only

Published 2023-08-10. Last modified 2026-06-17.