| CVE-2024-7612 |
Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application…
|
8.8
Élevée
|
8 oct. 2024 |
| CVE-2024-36130 |
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker…
|
9.8
Critique
|
7 août 2024 |
| CVE-2024-36131 |
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote…
|
8.8
Élevée
|
7 août 2024 |
| CVE-2024-34788 |
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to…
|
5.3
Moyenne
|
7 août 2024 |
| CVE-2024-22026 |
A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell…
|
6.7
Moyenne
|
22 mai 2024 |
| CVE-2023-46807 |
An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate…
|
6.7
Moyenne
|
22 mai 2024 |
| CVE-2023-46806 |
An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with…
|
6.7
Moyenne
|
22 mai 2024 |
| CVE-2023-35078 |
Exploitée
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
|
10.0
Critique
|
25 juil. 2023 |