| CVE-2025-10573 |
Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to…
|
9.6
Critical
|
Dec 9, 2025 |
| CVE-2024-13159 |
Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
|
9.8
Critical
|
Jan 14, 2025 |
| CVE-2024-13160 |
Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
|
9.8
Critical
|
Jan 14, 2025 |
| CVE-2024-13161 |
Exploited
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
|
9.8
Critical
|
Jan 14, 2025 |
| CVE-2024-10811 |
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
9.8
Critical
|
Jan 14, 2025 |
| CVE-2024-50330 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
9.8
Critical
|
Nov 12, 2024 |
| CVE-2023-39336 |
An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker…
|
9.6
Critical
|
Jan 9, 2024 |