High WID-SEC-2024-3435 18 CVEs

Ivanti Endpoint Manager: Mehrere Schwachstellen ermöglichen Codeausführung

Published Nov 12, 2024 · Updated Nov 12, 2024 · de-DE

Vendor: ivanti Product: Endpoint Manager Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um beliebigen Programmcode auszuführen.

Product

Ivanti Endpoint Manager ist eine Endpoint Management Software zur zentralen Verwaltung von Benutzerprofilen und -Geräten.

Vulnerabilities 18

Critical 9.8

CVE-2024-50330 Public exploit EPSS 40%

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 8.8

CVE-2024-50329

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.8

CVE-2024-34787 EPSS 18%

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti EPM Network devices

Nov 13, 2024
High 7.8

CVE-2024-50322

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.8

CVE-2024-50323

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.2

CVE-2024-32839

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32841

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32844

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32847

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34780

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34781 EPSS 68%

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34782

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34784

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-37376

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-50324 EPSS 19%

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.2

CVE-2024-50326 EPSS 26%

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.2

CVE-2024-50327

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024
High 7.2

CVE-2024-50328

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti Endpoint Manager Network devices

Nov 12, 2024

Revision history

2024-11-12 #1
Initiale Fassung

References

Ivanti Security Advisory EPM November 2024 vom 2024-11-12
https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022?language=en_US