Skip to contentIvanti Endpoint Manager vulnerabilities
- ivanti epm, endpoint manager +1 moreDeserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024...CVE-2024-29847Public exploitEPSS 52.1%10.0 Critical
- ivanti endpoint managerAn uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-84416.7 Medium
- ivanti endpoint managerWeak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83224.3 Medium
- ivanti endpoint managerMissing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83215.8 Medium
- ivanti automation, endpoint manager +1 moreMissing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-83205.3 Medium
- ivanti endpoint managerSQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September...CVE-2024-8191EPSS 20.3%7.8 High
- ivanti cloud services appliance, csa (cloud services appliance), endpoint manager cloud services appliance +2 moreAn OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518...CVE-2024-8190In KEVPublic exploitEPSS 88.5%7.2 High
- ivanti epmm, endpoint manager mobile +1 moreAn insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an...CVE-2024-361309.8 Critical
- ivanti epmm, endpoint manager mobile +1 moreInsufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote...CVE-2024-361328.2 High
- ivanti epmm, endpoint manager mobile +1 moreAn insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an...CVE-2024-361318.8 High
- ivanti epmm, endpoint manager mobile +1 moreAn improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a...CVE-2024-347885.3 Medium
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an...CVE-2024-373818.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-298468.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-298308.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-298298.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-298288.4 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29827EPSS 71.7%9.6 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29826EPSS 99.9%9.6 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29825EPSS 99.9%9.6 Critical
- ivanti epm, endpoint manager (epm), endpoint manager +2 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29824In KEVPublic exploitEPSS 99.9%9.6 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29823EPSS 99.9%9.6 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows...CVE-2024-29822EPSS 64.4%9.6 Critical
- ivanti epm, endpoint manager +1 moreA buffer overflow allows a low privilege user on the local machine that has the EPM Agent...CVE-2024-220587.8 High
- ivanti epmm, endpoint manager mobile +1 moreA local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local...CVE-2024-22026Public exploit6.7 Medium
- ivanti epmm, endpoint manager mobile +1 moreAn SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated...CVE-2023-468076.7 Medium
- ivanti epmm, endpoint manager mobile +1 moreAn SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an...CVE-2023-468066.7 Medium
- ivanti endpoint managerAn unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5...CVE-2023-393369.6 Critical
- ivanti epmm, endpoint manager mobile +1 moreA security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with...CVE-2023-393379.1 Critical
- ivanti epmm, endpoint manager mobile +1 moreA security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older...CVE-2023-393359.8 Critical
- ivanti endpoint managerAllows an authenticated attacker with network access to read arbitrary files on Endpoint Manager...CVE-2023-350836.5 Medium
- ivanti endpoint managerUnsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti...CVE-2023-350849.8 Critical
- ivanti endpoint managerAn issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure...CVE-2023-383446.5 Medium
- ivanti endpoint managerAn XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti...CVE-2023-383437.5 High
- ivanti epmm, endpoint manager mobile (epmm) and mobileiron core, endpoint manager mobile +2 moreAn authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users...CVE-2023-35082In KEVPublic exploitEPSS 100.0%10.0 Critical
- ivanti epmm, endpoint manager mobile (epmm), endpoint manager mobile +2 moreA path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2...CVE-2023-35081In KEVEPSS 63.6%7.2 High
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 moreIvanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote...CVE-2023-35078In KEVPublic exploitEPSS 100.0%10.0 Critical
- ivanti endpoint managerAn out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus...CVE-2023-350778.1 High
- ivanti endpoint managerA deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an...CVE-2023-283239.8 Critical
- ivanti endpoint managerA improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that...CVE-2023-28324Public exploitEPSS 12.9%9.8 Critical
- ivanti endpoint managerXML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to...CVE-2022-352597.8 High
- ivanti endpoint managerA privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that...CVE-2022-277739.8 Critical
- ivanti endpoint managerThe “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to...CVE-2022-301216.7 Medium
- ivanti endpoint manager cloud service appliance (epm csa), endpoint manager cloud services appliance +1 moreA code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an...CVE-2021-44529In KEVPublic exploitEPSS 99.1%9.8 Critical
- ivanti endpoint managerIvanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frm_splitfrm.aspx, /LDMS...CVE-2020-137735.4 Medium
- ivanti endpoint managerLDMS/alert_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a ...CVE-2020-137698.8 High
- ivanti endpoint managerIn /ldclient/ldprov.cgi in Ivanti Endpoint Manager through 2020.1.1, an attacker is able to...CVE-2020-137725.3 Medium
- ivanti endpoint managerAn unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1...CVE-2020-137749.9 Critical
- ivanti endpoint managerSeveral services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with...CVE-2020-137707.8 High
- ivanti endpoint managerVarious components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when...CVE-2020-137717.8 High
- ivanti endpoint managerAn issue was discovered in the Core Server in Ivanti Endpoint Manager (EPM) 2017.3 before SU7 and...CVE-2019-106519.8 Critical
- Show moreLoading…