Ivanti Endpoint Manager vulnerabilities, page 5
116 vulnerabilities
Known vulnerabilities in Ivanti Endpoint Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-32843ivantiendpoint_manager+1
EPSS score2.15%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-8321ivantiendpoint_managerEPSS score1.82%
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network.CVE-2024-8441ivantiendpoint_managerEPSS score0.36%
An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privileges to escalate their privileges to SYSTEM.CVE-2024-8320ivantiendpoint_managerEPSS score1.23%
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to spoof Network Isolation status of managed devices.CVE-2024-8322ivantiendpoint_managerEPSS score1.08%
Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality.CVE-2024-8191ivantiendpoint_managerEPSS score20.33%
SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.CVE-2024-34784ivantiendpoint_manager+1EPSS score1.71%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34781ivantiendpoint_manager+1EPSS score68.46%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34783ivantiendpoint_manager+1EPSS score43.36%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34787ivantiendpoint_manager+1EPSS score17.77%
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required.CVE-2024-34780ivantiendpoint_manager+1EPSS score1.71%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34782ivantiendpoint_manager+1EPSS score1.71%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34785ivantiendpoint_manager+1EPSS score25.39%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34779ivantiendpoint_manager+1EPSS score24.01%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-50326ivantiendpoint_managerEPSS score26.47%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-50327ivantiendpoint_managerEPSS score1.05%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-50322ivantiendpoint_managerEPSS score6.04%
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required.CVE-2024-50330ivantiendpoint_managerEPSS score40.29%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution.CVE-2024-50328ivantiendpoint_managerEPSS score1.78%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-50329ivantiendpoint_managerEPSS score1.76%
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.