Skip to contentIvanti Endpoint Manager vulnerabilities
- ivanti endpoint manager mobileOS command injection in Ivanti Endpoint ManagerCVE-2025-6770EPSS 19.5%7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint ManagerCVE-2025-70377.2 High
- ivanti endpoint managerImproper Encryption in Ivanti Endpoint ManagerCVE-2025-69968.4 High
- ivanti endpoint managerImproper Encryption in Ivanti Endpoint ManagerCVE-2025-69958.4 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreRemote Code ExecutionCVE-2025-4428In KEVPublic exploitEPSS 88.0%7.2 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreAuthentication BypassCVE-2025-4427In KEVPublic exploitEPSS 99.9%5.3 Medium
- ivanti endpoint managerReflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...CVE-2025-224668.2 High
- ivanti endpoint managerReflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...CVE-2025-224656.1 Medium
- ivanti endpoint managerAn untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1...CVE-2025-224646.1 Medium
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...CVE-2025-224617.2 High
- ivanti endpoint managerImproper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before...CVE-2025-224594.8 Medium
- ivanti endpoint managerDLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...CVE-2025-224587.8 High
- ivanti endpoint managerSQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January...CVE-2024-13162EPSS 65.0%7.2 High
- ivanti endpoint managerDeserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131637.8 High
- ivanti endpoint managerAn uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131647.8 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131657.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131667.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131677.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131687.5 High
- ivanti endpoint managerAn out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131697.8 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131707.5 High
- ivanti endpoint managerInsufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-13171EPSS 17.5%7.8 High
- ivanti endpoint managerImproper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131727.8 High
- ivanti endpoint managerAn unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131587.2 High
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13159In KEVPublic exploitEPSS 100.0%9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13160In KEVEPSS 91.0%9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13161In KEVEPSS 89.8%9.8 Critical
- ivanti endpoint managerAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-108119.8 Critical
- ivanti patch sdk, endpoint manager, neurons agent platform +4 more +6 moreInsufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated...CVE-2024-102567.1 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50330Public exploitEPSS 40.3%9.8 Critical
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503298.8 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503287.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503277.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50326EPSS 26.5%7.2 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50324EPSS 18.7%7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503237.8 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503227.8 High
- ivanti endpoint manager mobileInsecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to...CVE-2024-76128.8 High
- ivanti endpoint managerAn uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-84416.7 Medium
- ivanti endpoint managerWeak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83224.3 Medium
- ivanti endpoint managerMissing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83215.8 Medium
- ivanti automation, endpoint manager +1 moreMissing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83205.3 Medium
- ivanti endpoint managerSQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-8191EPSS 20.3%7.8 High
- ivanti epm, endpoint manager (epm), endpoint manager +2 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29824In KEVPublic exploitEPSS 99.9%9.6 Critical
- ivanti endpoint managerAn unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5...CVE-2023-393369.6 Critical
- ivanti endpoint managerAllows an authenticated attacker with network access to read arbitrary files on Endpoint Manager...CVE-2023-350836.5 Medium
- ivanti endpoint managerUnsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti...CVE-2023-350849.8 Critical
- ivanti epmm, endpoint manager mobile (epmm) and mobileiron core, endpoint manager mobile +2 moreAn authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users...CVE-2023-35082In KEVPublic exploitEPSS 100.0%10.0 Critical
- ivanti epmm, endpoint manager mobile (epmm), endpoint manager mobile +2 moreA path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2...CVE-2023-35081In KEVEPSS 63.6%7.2 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreIvanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote...CVE-2023-35078In KEVPublic exploitEPSS 100.0%10.0 Critical
- Show moreLoading…