Skip to contentIvanti Endpoint Manager vulnerabilities
- ivanti endpoint managerSQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January...CVE-2024-13162EPSS 65.0%7.2 High
- ivanti endpoint managerDeserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131637.8 High
- ivanti endpoint managerAn uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131647.8 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131657.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131667.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131677.5 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131687.5 High
- ivanti endpoint managerAn out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131697.8 High
- ivanti endpoint managerAn out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-131707.5 High
- ivanti endpoint managerInsufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-13171EPSS 17.5%7.8 High
- ivanti endpoint managerImproper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131727.8 High
- ivanti endpoint managerAn unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and...CVE-2024-131587.2 High
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13159In KEVPublic exploitEPSS 100.0%9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13160In KEVEPSS 91.0%9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 moreAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-13161In KEVEPSS 89.8%9.8 Critical
- ivanti endpoint managerAbsolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6...CVE-2024-108119.8 Critical
- ivanti patch sdk, endpoint manager, neurons agent platform +4 more +6 moreInsufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated...CVE-2024-102567.1 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-373767.2 High
- ivanti endpoint manager, epm +1 morePath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-34787EPSS 17.8%7.8 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-347847.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-347827.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-34781EPSS 68.5%7.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-347807.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-328477.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-328447.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-328417.2 High
- ivanti endpoint manager, epm +1 moreSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-328397.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50330Public exploitEPSS 40.3%9.8 Critical
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503298.8 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503287.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503277.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50326EPSS 26.5%7.2 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-50324EPSS 18.7%7.2 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503237.8 High
- ivanti endpoint managerPath traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6...CVE-2024-503227.8 High
- ivanti csa (cloud services appliance), endpoint manager cloud services appliance +1 morePath traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with...CVE-2024-9381EPSS 15.6%7.2 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 moreAn OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2...CVE-2024-9380In KEVEPSS 58.3%7.2 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 moreSQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote...CVE-2024-9379In KEVEPSS 44.3%6.5 Medium
- ivanti endpoint manager mobileInsecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to...CVE-2024-76128.8 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 morePath Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to...CVE-2024-8963In KEVPublic exploitEPSS 98.6%9.4 Critical
- ivanti epm, endpoint manager +1 moreAn External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before...CVE-2024-37397EPSS 59.3%8.2 High
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-34785EPSS 25.4%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-34783EPSS 43.4%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-34779EPSS 24.0%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-32848EPSS 43.4%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-328469.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-32845EPSS 24.0%9.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-328439.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-328429.1 Critical
- ivanti epm, endpoint manager +1 moreAn unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a...CVE-2024-32840EPSS 25.4%9.1 Critical
- Show moreLoading…