| CVE-2024-32840 |
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated…
|
9.1
Critique
|
12 sept. 2024 |
| CVE-2024-29847 |
Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows…
|
10.0
Critique
|
12 sept. 2024 |
| CVE-2024-8441 |
An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local…
|
6.7
Moyenne
|
10 sept. 2024 |
| CVE-2024-8321 |
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
|
5.8
Moyenne
|
10 sept. 2024 |
| CVE-2024-8191 |
SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…
|
7.8
Élevée
|
10 sept. 2024 |
| CVE-2024-37381 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker…
|
8.4
Élevée
|
29 juil. 2024 |
| CVE-2024-29823 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critique
|
31 mai 2024 |
| CVE-2024-29822 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critique
|
31 mai 2024 |
| CVE-2024-29830 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated…
|
8.4
Élevée
|
31 mai 2024 |
| CVE-2024-29829 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated…
|
8.4
Élevée
|
31 mai 2024 |
| CVE-2024-29828 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated…
|
8.4
Élevée
|
31 mai 2024 |
| CVE-2024-29827 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critique
|
31 mai 2024 |
| CVE-2024-29826 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critique
|
31 mai 2024 |
| CVE-2024-29825 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated…
|
9.6
Critique
|
31 mai 2024 |
| CVE-2024-29846 |
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated…
|
8.4
Élevée
|
31 mai 2024 |
| CVE-2024-29824 |
Exploitée
Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
|
9.6
Critique
|
31 mai 2024 |
| CVE-2023-38343 |
An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022…
|
Non notée
|
21 sept. 2023 |
| CVE-2023-38344 |
An issue was discovered in Ivanti Endpoint Manager before 2022 SU4
|
Non notée
|
21 sept. 2023 |
| CVE-2023-35077 |
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash
|
8.1
Élevée
|
21 juil. 2023 |
| CVE-2023-28324 |
A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege…
|
8.2
Élevée
|
30 juin 2023 |