| CVE-2024-7612 |
Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application…
|
8.8
High
|
Oct 8, 2024 |
| CVE-2024-36130 |
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker…
|
9.8
Critical
|
Aug 7, 2024 |
| CVE-2024-36131 |
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote…
|
8.8
High
|
Aug 7, 2024 |
| CVE-2024-34788 |
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to…
|
5.3
Medium
|
Aug 7, 2024 |
| CVE-2024-22026 |
A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell…
|
6.7
Medium
|
May 22, 2024 |
| CVE-2023-46807 |
An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate…
|
6.7
Medium
|
May 22, 2024 |
| CVE-2023-46806 |
An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with…
|
6.7
Medium
|
May 22, 2024 |
| CVE-2023-35078 |
Exploited
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
|
10.0
Critical
|
Jul 25, 2023 |