| CVE-2024-13160 |
Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
|
9.8
Critical
|
Jan 14, 2025 |
| CVE-2024-13161 |
Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
|
9.8
Critical
|
Jan 14, 2025 |
| CVE-2024-10811 |
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
9.8
Critical
|
Jan 14, 2025 |
| CVE-2024-10256 |
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete…
|
7.1
High
|
Dec 10, 2024 |
| CVE-2024-50330 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
9.8
Critical
|
Nov 12, 2024 |
| CVE-2024-50329 |
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
8.8
High
|
Nov 12, 2024 |
| CVE-2024-50328 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.2
High
|
Nov 12, 2024 |
| CVE-2024-50327 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.2
High
|
Nov 12, 2024 |
| CVE-2024-50326 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.2
High
|
Nov 12, 2024 |
| CVE-2024-50324 |
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.2
High
|
Nov 12, 2024 |
| CVE-2024-50323 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.8
High
|
Nov 12, 2024 |
| CVE-2024-50322 |
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.8
High
|
Nov 12, 2024 |
| CVE-2024-8441 |
An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local…
|
6.7
Medium
|
Sep 10, 2024 |
| CVE-2024-8322 |
Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…
|
4.3
Medium
|
Sep 10, 2024 |
| CVE-2024-8321 |
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
|
5.8
Medium
|
Sep 10, 2024 |
| CVE-2024-8320 |
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
|
5.3
Medium
|
Sep 10, 2024 |
| CVE-2024-8191 |
SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…
|
7.8
High
|
Sep 10, 2024 |
| CVE-2023-39336 |
An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker…
|
9.6
Critical
|
Jan 9, 2024 |
| CVE-2023-35083 |
Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered…
|
Not rated
|
Oct 18, 2023 |
| CVE-2023-35084 |
Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager…
|
Not rated
|
Oct 18, 2023 |
| CVE-2023-35077 |
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash
|
8.1
High
|
Jul 21, 2023 |