Skip to content

Vulnerabilities of Ivanti EPMM

Is your version affected?

CVE Summary Score Published
CVE-2024-36130 An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker… 9.8 Critical Aug 7, 2024
CVE-2024-36132 Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass… 8.2 High Aug 7, 2024
CVE-2024-36131 An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote… 8.8 High Aug 7, 2024
CVE-2024-34788 An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to… 5.3 Medium Aug 7, 2024
CVE-2024-22026 A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell… 6.7 Medium May 22, 2024
CVE-2023-46807 An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate… 6.7 Medium May 22, 2024
CVE-2023-46806 An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with… 6.7 Medium May 22, 2024
CVE-2023-39337 A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled… Not rated Nov 14, 2023
CVE-2023-39335 A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated… Not rated Nov 14, 2023
CVE-2023-35082 Exploited Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability 10.0 Critical Aug 15, 2023
CVE-2023-35081 Exploited Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability 7.2 High Aug 3, 2023

Other Ivanti products