EP
Product
EPM
On CISA KEVExploited in the wild
22
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 21Medium 0Low 0
Watch
Add EPM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29824 In wildKEV | 8.8 | May 31 | Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability Affected: 2022 SU5 through 2022 SU5 |
| CVE-2024-37397 | 8.2 | Sep 12 | An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-34787 | 7.8 | Nov 13 | Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-34784 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-34780 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-34781 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-32839 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-32844 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-32847 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-34782 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-32841 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-37376 | 7.2 | Nov 13 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to… Affected: 2024 November Security Update before 2024 November Security Update; 2022 SU6 November Security Update before 2022 SU6 November Security Update |
| CVE-2024-32840 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-34783 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-34779 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-32848 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-34785 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-32843 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-32846 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-32845 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
| CVE-2024-32842 | 7.2 | Sep 12 | An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code… Affected: 2024 September Security Update before 2024 September Security Update; 2022 SU6 before 2022 SU6 |
Showing 21