| CVE-2026-18129 |
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows…
|
8.1
Élevée
|
11 août 2026 |
| CVE-2026-18127 |
External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote…
|
7.7
Élevée
|
11 août 2026 |
| CVE-2026-18125 |
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote…
|
7.5
Élevée
|
11 août 2026 |
| CVE-2026-8111 |
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated…
|
8.8
Élevée
|
12 mai 2026 |
| CVE-2026-8110 |
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows…
|
7.8
Élevée
|
12 mai 2026 |
| CVE-2026-8109 |
An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote…
|
6.5
Moyenne
|
12 mai 2026 |
| CVE-2026-1603 |
Exploitée
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
|
8.6
Élevée
|
10 févr. 2026 |
| CVE-2026-1602 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
10 févr. 2026 |
| CVE-2025-13662 |
Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior…
|
7.8
Élevée
|
9 déc. 2025 |
| CVE-2025-13661 |
Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to…
|
7.1
Élevée
|
9 déc. 2025 |
| CVE-2025-13659 |
Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a…
|
8.8
Élevée
|
9 déc. 2025 |
| CVE-2025-10573 |
Stored XSS in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to…
|
9.6
Critique
|
9 déc. 2025 |
| CVE-2025-10918 |
Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local…
|
7.1
Élevée
|
11 nov. 2025 |
| CVE-2025-62384 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62386 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62383 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62391 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62385 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62387 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62388 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62389 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62390 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-62392 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-11623 |
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read…
|
6.5
Moyenne
|
13 oct. 2025 |
| CVE-2025-9713 |
Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve…
|
8.8
Élevée
|
13 oct. 2025 |