| CVE-2024-13160 |
Exploitée
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
|
9.8
Critique
|
14 janv. 2025 |
| CVE-2024-13161 |
Exploitée
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
|
9.8
Critique
|
14 janv. 2025 |
| CVE-2024-10811 |
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security…
|
9.8
Critique
|
14 janv. 2025 |
| CVE-2024-10256 |
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete…
|
7.1
Élevée
|
10 déc. 2024 |
| CVE-2024-50330 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
9.8
Critique
|
12 nov. 2024 |
| CVE-2024-50329 |
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
8.8
Élevée
|
12 nov. 2024 |
| CVE-2024-50328 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.2
Élevée
|
12 nov. 2024 |
| CVE-2024-50327 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.2
Élevée
|
12 nov. 2024 |
| CVE-2024-50326 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.2
Élevée
|
12 nov. 2024 |
| CVE-2024-50324 |
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.2
Élevée
|
12 nov. 2024 |
| CVE-2024-50323 |
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.8
Élevée
|
12 nov. 2024 |
| CVE-2024-50322 |
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security…
|
7.8
Élevée
|
12 nov. 2024 |
| CVE-2024-8441 |
An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local…
|
6.7
Moyenne
|
10 sept. 2024 |
| CVE-2024-8322 |
Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…
|
4.3
Moyenne
|
10 sept. 2024 |
| CVE-2024-8321 |
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
|
5.8
Moyenne
|
10 sept. 2024 |
| CVE-2024-8320 |
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
|
5.3
Moyenne
|
10 sept. 2024 |
| CVE-2024-8191 |
SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…
|
7.8
Élevée
|
10 sept. 2024 |
| CVE-2023-39336 |
An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker…
|
9.6
Critique
|
9 janv. 2024 |
| CVE-2023-35083 |
Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered…
|
Non notée
|
18 oct. 2023 |
| CVE-2023-35084 |
Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager…
|
Non notée
|
18 oct. 2023 |
| CVE-2023-35077 |
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash
|
8.1
Élevée
|
21 juil. 2023 |