| CVE-2025-11622 |
Insecure deserialization in Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to…
|
7.8
High
|
Oct 13, 2025 |
| CVE-2025-9872 |
Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote…
|
8.8
High
|
Sep 9, 2025 |
| CVE-2025-9712 |
Insufficient filename validation in Ivanti Endpoint Manager before 2024 SU3 SR1 and 2022 SU8 SR2 allows a remote…
|
8.8
High
|
Sep 9, 2025 |
| CVE-2025-7037 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a remote…
|
7.2
High
|
Jul 8, 2025 |
| CVE-2025-6996 |
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security…
|
8.4
High
|
Jul 8, 2025 |
| CVE-2025-6995 |
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security…
|
8.4
High
|
Jul 8, 2025 |
| CVE-2025-22466 |
Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote…
|
8.2
High
|
Apr 8, 2025 |
| CVE-2025-22465 |
Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote…
|
6.1
Medium
|
Apr 8, 2025 |
| CVE-2025-22464 |
An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022…
|
6.1
Medium
|
Apr 8, 2025 |
| CVE-2025-22461 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote…
|
7.2
High
|
Apr 8, 2025 |
| CVE-2025-22459 |
Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a…
|
4.8
Medium
|
Apr 8, 2025 |
| CVE-2025-22458 |
DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated…
|
7.8
High
|
Apr 8, 2025 |
| CVE-2024-13162 |
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update…
|
7.2
High
|
Jan 14, 2025 |
| CVE-2024-13163 |
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025…
|
7.8
High
|
Jan 14, 2025 |
| CVE-2024-13164 |
An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025…
|
7.8
High
|
Jan 14, 2025 |
| CVE-2024-13165 |
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
7.5
High
|
Jan 14, 2025 |
| CVE-2024-13166 |
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
7.5
High
|
Jan 14, 2025 |
| CVE-2024-13167 |
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
7.5
High
|
Jan 14, 2025 |
| CVE-2024-13168 |
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
7.5
High
|
Jan 14, 2025 |
| CVE-2024-13169 |
An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
7.8
High
|
Jan 14, 2025 |
| CVE-2024-13170 |
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
7.5
High
|
Jan 14, 2025 |
| CVE-2024-13171 |
Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025…
|
7.8
High
|
Jan 14, 2025 |
| CVE-2024-13172 |
Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025…
|
7.8
High
|
Jan 14, 2025 |
| CVE-2024-13158 |
An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025…
|
7.2
High
|
Jan 14, 2025 |
| CVE-2024-13159 |
Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
|
9.8
Critical
|
Jan 14, 2025 |