Ivanti EPM vulnerabilities, page 2
33 vulnerabilities
Known vulnerabilities in Ivanti EPM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-32840ivantiendpoint_manager+1
EPSS score25.39%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-32844ivantiendpoint_manager+1EPSS score1.71%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-32839ivantiendpoint_manager+1EPSS score3.40%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-32845ivantiendpoint_manager+1EPSS score24.01%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-32843ivantiendpoint_manager+1EPSS score2.15%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34784ivantiendpoint_manager+1EPSS score1.71%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34781ivantiendpoint_manager+1EPSS score68.46%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34783ivantiendpoint_manager+1EPSS score43.36%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34787ivantiendpoint_manager+1EPSS score17.77%
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required.CVE-2024-34780ivantiendpoint_manager+1EPSS score1.71%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34782ivantiendpoint_manager+1EPSS score1.71%
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34785ivantiendpoint_manager+1EPSS score25.39%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.CVE-2024-34779ivantiendpoint_manager+1EPSS score24.01%
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.