| CVE-2024-32840 |
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated…
|
9.1
Critical
|
Sep 12, 2024 |
| CVE-2024-29847 |
Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows…
|
10.0
Critical
|
Sep 12, 2024 |
| CVE-2024-8441 |
An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local…
|
6.7
Medium
|
Sep 10, 2024 |
| CVE-2024-8321 |
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
|
5.8
Medium
|
Sep 10, 2024 |
| CVE-2024-8191 |
SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…
|
7.8
High
|
Sep 10, 2024 |
| CVE-2024-37381 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker…
|
8.4
High
|
Jul 29, 2024 |
| CVE-2024-29823 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critical
|
May 31, 2024 |
| CVE-2024-29822 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critical
|
May 31, 2024 |
| CVE-2024-29830 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated…
|
8.4
High
|
May 31, 2024 |
| CVE-2024-29829 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated…
|
8.4
High
|
May 31, 2024 |
| CVE-2024-29828 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated…
|
8.4
High
|
May 31, 2024 |
| CVE-2024-29827 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critical
|
May 31, 2024 |
| CVE-2024-29826 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critical
|
May 31, 2024 |
| CVE-2024-29825 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critical
|
May 31, 2024 |
| CVE-2024-29846 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated…
|
8.4
High
|
May 31, 2024 |
| CVE-2024-29824 |
Exploited
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
|
9.6
Critical
|
May 31, 2024 |
| CVE-2023-38343 |
An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022…
|
Not rated
|
Sep 21, 2023 |
| CVE-2023-38344 |
An issue was discovered in Ivanti Endpoint Manager before 2022 SU4
|
Not rated
|
Sep 21, 2023 |
| CVE-2023-35077 |
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash
|
8.1
High
|
Jul 21, 2023 |
| CVE-2023-28324 |
A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege…
|
8.2
High
|
Jun 30, 2023 |