6.7
Medium
CVE-2023-46806 An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with…
Description
An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EPMM 12.1 | earliest → < 12.1.0.0 | 12.1.0.0 |
| endpoint_manager_mobile 12.1 | earliest → < 12.1.0.0 | 12.1.0.0 |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of EPMM
The 11 CVEs of EPMM →
CVE-2024-36130
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker…
9.8
Critical
CVE-2024-36131
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote…
8.8
High
CVE-2024-34788
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to…
5.3
Medium
CVE-2024-36132
Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass…
8.2
High