Ivanti Epm vulnerabilities

• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1... CVE-2026-6973 In KEV EPSS 34.5% 7.2 HighMay 7, 2026
• ivanti endpoint manager, endpoint manager (epm) +1 more An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote... CVE-2026-1603 In KEV EPSS 88.3% 8.6 HighFebruary 10, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... CVE-2026-1340 In KEVPublic exploit EPSS 98.6% 9.8 CriticalJanuary 29, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated... CVE-2026-1281 In KEVPublic exploit EPSS 98.7% 9.8 CriticalJanuary 29, 2026
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more Remote Code Execution CVE-2025-4428 In KEVPublic exploit EPSS 88.0% 7.2 HighMay 13, 2025
• ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more Authentication Bypass CVE-2025-4427 In KEVPublic exploit EPSS 99.9% 5.3 MediumMay 13, 2025
• ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... CVE-2024-13159 In KEVPublic exploit EPSS 100.0% 9.8 CriticalJanuary 14, 2025
• ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... CVE-2024-13160 In KEV EPSS 91.0% 9.8 CriticalJanuary 14, 2025
• ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... CVE-2024-13161 In KEV EPSS 89.8% 9.8 CriticalJanuary 14, 2025
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-37376 7.2 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-34787 EPSS 17.8% 7.8 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-34784 7.2 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-34782 7.2 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-34781 EPSS 68.5% 7.2 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-34780 7.2 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-32847 7.2 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-32844 7.2 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-32841 7.2 HighNovember 13, 2024
• ivanti endpoint manager, epm +1 more SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6... CVE-2024-32839 7.2 HighNovember 13, 2024
• ivanti epm, endpoint manager +1 more An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before... CVE-2024-37397 EPSS 59.3% 8.2 HighSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-34785 EPSS 25.4% 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-34783 EPSS 43.4% 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-34779 EPSS 24.0% 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-32848 EPSS 43.4% 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-32846 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-32845 EPSS 24.0% 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-32843 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-32842 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a... CVE-2024-32840 EPSS 25.4% 9.1 CriticalSeptember 12, 2024
• ivanti epm, endpoint manager +1 more Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024... CVE-2024-29847 Public exploit EPSS 52.1% 10.0 CriticalSeptember 12, 2024
• ivanti epmm, endpoint manager mobile +1 more An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an... CVE-2024-36130 9.8 CriticalAugust 7, 2024
• ivanti epmm, endpoint manager mobile +1 more Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote... CVE-2024-36132 8.2 HighAugust 7, 2024
• ivanti epmm, endpoint manager mobile +1 more An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an... CVE-2024-36131 8.8 HighAugust 7, 2024
• ivanti epmm, endpoint manager mobile +1 more An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a... CVE-2024-34788 5.3 MediumAugust 7, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an... CVE-2024-37381 8.4 HighJuly 29, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29846 8.4 HighMay 31, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29830 8.4 HighMay 31, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29829 8.4 HighMay 31, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29828 8.4 HighMay 31, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29827 EPSS 71.7% 9.6 CriticalMay 31, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29826 EPSS 99.9% 9.6 CriticalMay 31, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29825 EPSS 99.9% 9.6 CriticalMay 31, 2024
• ivanti epm, endpoint manager (epm), endpoint manager +2 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29824 In KEVPublic exploit EPSS 99.9% 9.6 CriticalMay 31, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29823 EPSS 99.9% 9.6 CriticalMay 31, 2024
• ivanti epm, endpoint manager +1 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... CVE-2024-29822 EPSS 64.4% 9.6 CriticalMay 31, 2024
• ivanti epm, endpoint manager +1 more A buffer overflow allows a low privilege user on the local machine that has the EPM Agent... CVE-2024-22058 7.8 HighMay 31, 2024
• ivanti epmm, endpoint manager mobile +1 more A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local... CVE-2024-22026 Public exploit 6.7 MediumMay 22, 2024
• ivanti epmm, endpoint manager mobile +1 more An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated... CVE-2023-46807 6.7 MediumMay 22, 2024
• ivanti epmm, endpoint manager mobile +1 more An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an... CVE-2023-46806 6.7 MediumMay 22, 2024
• ivanti epmm, endpoint manager mobile +1 more A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with... CVE-2023-39337 9.1 CriticalNovember 14, 2023
• Show olderLoading…