Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2024-1199 10 CVEs

Ivanti Endpoint Manager: Mehrere Schwachstellen ermöglichen Codeausführung

Published May 21, 2024 · Updated Jun 16, 2024 · Revision 2 · de-DE

Vendor: ivanti Product: Endpoint Manager Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um beliebigen Programmcode auszuführen.

Product

Ivanti Endpoint Manager ist eine Endpoint Management Software zur zentralen Verwaltung von Benutzerprofilen und -Geräten.

Vulnerabilities 10

  • Critical 9.6
    CVE-2024-29824 Exploited Public exploit Scanner template EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
    KEV Oct 2, 2024
  • Critical 9.6
    CVE-2024-29822 EPSS 64%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
  • Critical 9.6
    CVE-2024-29823 EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
  • Critical 9.6
    CVE-2024-29825 EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
  • Critical 9.6
    CVE-2024-29826 EPSS 100%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
  • Critical 9.6
    CVE-2024-29827 EPSS 72%

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated at…

    ivanti EPM Network devices
  • High 8.4
    CVE-2024-29828

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated atta…

    ivanti EPM Network devices
  • High 8.4
    CVE-2024-29829

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated atta…

    ivanti EPM Network devices
  • High 8.4
    CVE-2024-29830

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated atta…

    ivanti EPM Network devices
  • High 8.4
    CVE-2024-29846

    An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated atta…

    ivanti EPM Network devices

Revision history

  1. #2

    Exploit aufgenommen

  2. #1

    Initiale Fassung

References