Epm (Ivanti) - vulnerabilities (CVEs)

33 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2024-11-13. Vendor: Ivanti.

CVEs of Epm

• CVE-2024-34781 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-34787 - CVSS 7.8 (high), 2024-11-13: Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to…
• CVE-2024-34780 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-34784 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-34782 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-37376 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-32841 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-32839 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-32847 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-32844 - CVSS 7.2 (high), 2024-11-13: SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
• CVE-2024-32848 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-34785 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-34783 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-34779 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-37397 - CVSS 8.2 (high), 2024-09-12: An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…
• CVE-2024-29847 - CVSS 10 (critical), 2024-09-12: Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to…
• CVE-2024-32843 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-32842 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-32846 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-32840 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-32845 - CVSS 9.1 (critical), 2024-09-12: An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to…
• CVE-2024-37381 - CVSS 8.4 (high), 2024-07-29: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute…
• CVE-2024-29829 - CVSS 8.4 (high), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute…
• CVE-2024-29846 - CVSS 8.4 (high), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute…
• CVE-2024-29830 - CVSS 8.4 (high), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute…
• CVE-2024-29823 - CVSS 9.6 (critical), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
• CVE-2024-29826 - CVSS 9.6 (critical), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
• CVE-2024-29825 - CVSS 9.6 (critical), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
• CVE-2024-29828 - CVSS 8.4 (high), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute…
• CVE-2024-29824 - CVSS 9.6 (critical), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
• CVE-2024-29827 - CVSS 9.6 (critical), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
• CVE-2024-29822 - CVSS 9.6 (critical), 2024-05-31: An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
• CVE-2024-22058 - CVSS 7.8 (high), 2024-05-31: A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary code with elevated permissions in…