Ivanti Endpoint Manager vulnerabilities

• ivanti endpoint manager mobile Missing authorization in Ivanti Endpoint Manager Mobile before version 12.10.0.0, 12.9.0.2, and... CVE-2026-18851 8.8 HighSeptember 8, 2026
• ivanti endpoint manager SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a... CVE-2026-8111 8.8 HighMay 12, 2026
• ivanti endpoint manager Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6... CVE-2026-8110 7.8 HighMay 12, 2026
• ivanti endpoint manager An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6... CVE-2026-8109 6.5 MediumMay 12, 2026
• ivanti endpoint manager mobile An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0... CVE-2026-5787 8.9 HighMay 7, 2026
• ivanti endpoint manager mobile An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows... CVE-2026-5788 7.0 HighMay 7, 2026
• ivanti endpoint manager mobile Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1... CVE-2026-7821 7.4 HighMay 7, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1... CVE-2026-6973 In KEV EPSS 34.5% 7.2 HighMay 7, 2026
• ivanti endpoint manager mobile An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and... CVE-2026-5786 EPSS 11.2% 8.8 HighMay 7, 2026
• ivanti endpoint manager, endpoint manager (epm) +1 more An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote... CVE-2026-1603 In KEV EPSS 88.3% 8.6 HighFebruary 10, 2026
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated... CVE-2026-1602 6.5 MediumFebruary 10, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... CVE-2026-1340 In KEVPublic exploit EPSS 98.6% 9.8 CriticalJanuary 29, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... CVE-2026-1281 In KEVPublic exploit EPSS 98.7% 9.8 CriticalJanuary 29, 2026
• ivanti endpoint manager Improper verification of cryptographic signatures in the patch management component of Ivanti... CVE-2025-13662 7.8 HighDecember 9, 2025
• ivanti endpoint manager Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote... CVE-2025-13661 7.1 HighDecember 9, 2025
• ivanti endpoint manager Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to... CVE-2025-13659 8.8 HighDecember 9, 2025
• ivanti endpoint manager Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote... CVE-2025-10573 EPSS 34.1% 9.6 CriticalDecember 9, 2025
• ivanti endpoint manager Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4... CVE-2025-10918 7.1 HighNovember 11, 2025
• ivanti endpoint manager mobile Path traversal in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12.4.0.4... CVE-2025-10986 4.7 MediumOctober 14, 2025
• ivanti endpoint manager mobile OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12... CVE-2025-10985 EPSS 21.3% 7.2 HighOctober 14, 2025
• ivanti endpoint manager mobile OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12... CVE-2025-10243 EPSS 21.3% 7.2 HighOctober 14, 2025
• ivanti endpoint manager mobile OS command injection in the admin panel of Ivanti EPMM before version 12.6.0.2, 12.5.0.4, and 12... CVE-2025-10242 EPSS 21.3% 7.2 HighOctober 14, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62384 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62386 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62383 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62391 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62385 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62387 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62388 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62389 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62390 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-62392 6.5 MediumOctober 13, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager allows a remote authenticated attacker to read arbitrary... CVE-2025-11623 6.5 MediumOctober 13, 2025
• ivanti endpoint manager Path traversal in Ivanti Endpoint Manager allows a remote unauthenticated attacker to achieve... CVE-2025-9713 EPSS 16.1% 8.8 HighOctober 13, 2025
• ivanti endpoint manager Insecure deserialization in Ivanti Endpoint Manager allows a local authenticated attacker to... CVE-2025-11622 7.8 HighOctober 13, 2025
• ivanti endpoint manager Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 Security Update 1 and... CVE-2025-9872 EPSS 17.0% 8.8 HighSeptember 9, 2025
• ivanti endpoint manager Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 Security Update 1 and... CVE-2025-9712 EPSS 25.6% 8.8 HighSeptember 9, 2025
• ivanti endpoint manager mobile OS command injection in Ivanti Endpoint Manager CVE-2025-6771 EPSS 23.0% 7.2 HighJuly 8, 2025
• ivanti endpoint manager mobile OS command injection in Ivanti Endpoint Manager CVE-2025-6770 EPSS 19.5% 7.2 HighJuly 8, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager CVE-2025-7037 7.2 HighJuly 8, 2025
• ivanti endpoint manager Improper Encryption in Ivanti Endpoint Manager CVE-2025-6996 8.4 HighJuly 8, 2025
• ivanti endpoint manager Improper Encryption in Ivanti Endpoint Manager CVE-2025-6995 8.4 HighJuly 8, 2025
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more Remote Code Execution CVE-2025-4428 In KEVPublic exploit EPSS 88.0% 7.2 HighMay 13, 2025
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more Authentication Bypass CVE-2025-4427 In KEVPublic exploit EPSS 99.9% 5.3 MediumMay 13, 2025
• ivanti endpoint manager Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7... CVE-2025-22466 8.2 HighApril 8, 2025
• ivanti endpoint manager Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7... CVE-2025-22465 6.1 MediumApril 8, 2025
• ivanti endpoint manager An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1... CVE-2025-22464 6.1 MediumApril 8, 2025
• ivanti endpoint manager SQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7... CVE-2025-22461 7.2 HighApril 8, 2025
• ivanti endpoint manager Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before... CVE-2025-22459 4.8 MediumApril 8, 2025
• ivanti endpoint manager DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7... CVE-2025-22458 7.8 HighApril 8, 2025
• Show olderLoading…