High NCSC-2024-0441 18 CVEs

Kwetsbaarheden verholpen in Ivanti Endpoint Manager

Published Nov 13, 2024 · Updated Nov 13, 2024 · nl

Vendor: ivanti Product: Endpoint Manager Product: EPM

Summary

Ivanti heeft kwetsbaarheden verholpen in Ivanti Endpoint Manager.

Details

Interpretaties
Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:

- SQL Injection
- Omzeilen van beveiligingsmaatregel
- Uitvoer van willekeurige code op de server

Oplossingen
Ivanti heeft updates uitgebracht om de kwetsbaarheden in Ivanti Endpoint Manager te verhelpen. Zie de referentie voor meer informatie.

Vulnerabilities 18

Critical 9.8

CVE-2024-50330 Public exploit EPSS 40%

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 8.8

CVE-2024-50329

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.8

CVE-2024-34787 EPSS 18%

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti EPM Network devices

Nov 13, 2024
High 7.8

CVE-2024-50322

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.8

CVE-2024-50323

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.2

CVE-2024-32839

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32841

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32844

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32847

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34780

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34781 EPSS 68%

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34782

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34784

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-37376

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-50324 EPSS 19%

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.2

CVE-2024-50326 EPSS 26%

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.2

CVE-2024-50327

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.2

CVE-2024-50328

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024

Revision history

2024-11-13 #0
Initiele versie

References

Reference - cveprojectv5
https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022