Product · ivanti

Endpoint Manager

73 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

Medium 6.8

CVE-2026-18128

Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows …

ivanti Endpoint Manager Network devices

Nov 10, 2026
Medium 6.5

CVE-2026-8109

An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authe…

ivanti Endpoint Manager Network devices

May 12, 2026
Medium 6.5

CVE-2026-1602

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Feb 10, 2026
Medium 6.5

CVE-2025-62384

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62386

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62383

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62391

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62385

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62387

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62388

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62389

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62390

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-62392

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.5

CVE-2025-11623

SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitra…

ivanti Endpoint Manager Network devices

Oct 13, 2025
Medium 6.1

CVE-2025-22465

Reflected XSS in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthentic…

ivanti Endpoint Manager Network devices

Apr 8, 2025
Medium 6.1

CVE-2025-22464

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 202…

ivanti Endpoint Manager Network devices

Apr 8, 2025
Medium 4.8

CVE-2025-22459

Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a …

ivanti Endpoint Manager Network devices

Apr 8, 2025
Medium 6.7

CVE-2024-8441

An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local aut…

ivanti Endpoint Manager Network devices

Sep 10, 2024
Medium 4.3

CVE-2024-8322

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote aut…

ivanti Endpoint Manager Network devices

Sep 10, 2024
Medium 5.8

CVE-2024-8321

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…

ivanti Endpoint Manager Network devices

Sep 10, 2024
Medium 5.3

CVE-2024-8320

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…

ivanti Endpoint Manager Network devices

Sep 10, 2024