6.7
Moyenne
CVE-2023-46806 An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with…
Description
An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EPMM 12.1 | premières → < 12.1.0.0 | 12.1.0.0 |
| endpoint_manager_mobile 12.1 | premières → < 12.1.0.0 | 12.1.0.0 |
Références
- forums.ivanti.com forums.ivanti.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de EPMM
Les 11 CVE de EPMM →
CVE-2024-36130
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker…
9.8
Critique
CVE-2024-36131
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote…
8.8
Élevée
CVE-2024-34788
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to…
5.3
Moyenne
CVE-2024-36132
Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass…
8.2
Élevée