| CVE-2026-18129 |
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows…
|
8.1
High
|
Aug 11, 2026 |
| CVE-2026-18127 |
External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote…
|
7.7
High
|
Aug 11, 2026 |
| CVE-2026-18125 |
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote…
|
7.5
High
|
Aug 11, 2026 |
| CVE-2026-8111 |
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated…
|
8.8
High
|
May 12, 2026 |
| CVE-2026-8110 |
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows…
|
7.8
High
|
May 12, 2026 |
| CVE-2026-8109 |
An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote…
|
6.5
Medium
|
May 12, 2026 |
| CVE-2026-1603 |
Exploited
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
|
8.6
High
|
Feb 10, 2026 |
| CVE-2026-1602 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Feb 10, 2026 |
| CVE-2025-13662 |
Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior…
|
7.8
High
|
Dec 9, 2025 |
| CVE-2025-13661 |
Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-13659 |
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a…
|
8.8
High
|
Dec 9, 2025 |
| CVE-2025-10573 |
Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to…
|
9.6
Critical
|
Dec 9, 2025 |
| CVE-2025-10918 |
Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local…
|
7.1
High
|
Nov 11, 2025 |
| CVE-2025-62384 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62386 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62383 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62391 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62385 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62387 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62388 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62389 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62390 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-62392 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-11623 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Medium
|
Oct 13, 2025 |
| CVE-2025-9713 |
Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve…
|
8.8
High
|
Oct 13, 2025 |