Ivanti EPM vulnerabilities
33 published CVEs name Ivanti EPM among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 33
- Last 12 months
- 0
- Critical
- 16
- Known exploited
- 1
Critical 16High 17Medium 0Low 0Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2024-29824
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to…
Ivanti · EPM
ExploitedCritical9.6
Newest CVEs
- CVE-2024-34784
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2 - CVE-2024-34780
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2 - CVE-2024-34781
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2 - CVE-2024-32839
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2 - CVE-2024-32844
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2 - CVE-2024-34787
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to…
Ivanti · EPM
High7.8 - CVE-2024-32847
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2 - CVE-2024-34782
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2 - CVE-2024-32841
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2 - CVE-2024-37376
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with…
Ivanti · EPM
High7.2