Aller au contenu

Vulnérabilités de Ivanti EPM

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-37376 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-34784 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-34782 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-34781 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-34780 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-34787 Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.8 Élevée 13 nov. 2024
CVE-2024-32847 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-32839 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-32844 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-32841 SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update… 7.2 Élevée 13 nov. 2024
CVE-2024-37397 An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024… 8.2 Élevée 12 sept. 2024
CVE-2024-34785 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-34783 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-34779 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-32848 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-32846 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-32845 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-32843 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-32842 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-32840 An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated… 9.1 Critique 12 sept. 2024
CVE-2024-29847 Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows… 10.0 Critique 12 sept. 2024
CVE-2024-37381 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker… 8.4 Élevée 29 juil. 2024
CVE-2024-29823 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated… 9.6 Critique 31 mai 2024
CVE-2024-29822 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated… 9.6 Critique 31 mai 2024
CVE-2024-29830 An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated… 8.4 Élevée 31 mai 2024

Autres produits Ivanti