Product · ivanti

EPM

33 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

High 7.2

CVE-2024-34780

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34784

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34782

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-34781 EPSS 68%

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.8

CVE-2024-34787 EPSS 18%

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update all…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32847

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32841

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32844

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-32839

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 7.2

CVE-2024-37376

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo…

ivanti EPM Network devices

Nov 13, 2024
High 8.2

CVE-2024-37397 EPSS 59%

An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 S…

ivanti EPM Network devices

Sep 12, 2024
High 8.4

CVE-2024-37381

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker with…

ivanti EPM Network devices

Jul 29, 2024
High 8.4

CVE-2024-29830

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated atta…

ivanti EPM Network devices

May 31, 2024
High 8.4

CVE-2024-29846

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated atta…

ivanti EPM Network devices

May 31, 2024
High 8.4

CVE-2024-29829

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated atta…

ivanti EPM Network devices

May 31, 2024
High 8.4

CVE-2024-29828

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated atta…

ivanti EPM Network devices

May 31, 2024
High 7.8

CVE-2024-22058

A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrar…

ivanti EPM Network devices

May 31, 2024