Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Ivanti Endpoint ManagerIvanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

Risk 65
Severity
8.6
Exploited
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-1603

Ivanti Endpoint ManagerIvanti Endpoint Manager (EPM) SQL Injection Vulnerability

Risk 98
Severity
8.8
Exploited
SQL Injection
AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

1 / 2
Source: NVD
First published (updated )
CVE-2024-29824

Ivanti EPMIvanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Risk 99
Severity
9.8
Exploited
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

1 / 2
Source: NVD
First published (updated )
CVE-2024-13161

Ivanti EPMIvanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Risk 99
Severity
9.8
Exploited
Path Traversal
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

1 / 2
Source: NVD
First published (updated )
CVE-2024-13159

Ivanti EPMIvanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

Risk 99
Severity
9.8
Exploited
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

1 / 2
Source: NVD
First published (updated )
CVE-2024-13160

Ivanti EPMPath Traversal

Risk 99
Severity
9.8
Exploited
Path Traversal
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

First published (updated )
CVE-2024-10811

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203