Advisories · Technology
Ivanti Endpoint Manager.
Every CVE that names Ivanti Endpoint Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Improper certificate validation in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Weak cryptography or TLS
- CVSS 7.7 High
External control of a file path in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CVSS 7.5 High
Out-of-bounds read in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 8.8 High
SQL injection in ivanti Endpoint Manager
- ivanti Endpoint Manager
- SQL injection
- CVSS 7.8 High
Incorrect permission assignment in ivanti Endpoint Manager
- ivanti Endpoint Manager
- Broken access control
- CVSS 6.5 Medium
ivanti Endpoint Manager: An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version…
- ivanti Endpoint Manager
- CWE-749
- CVSS 8.6 HighCritical · KEV, CVSS 7+ and EPSSKEV
Authentication bypass in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Authentication bypass
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 7.8 High
Improper signature verification in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Weak cryptography or TLS
- CVSS 7.1 High
Path traversal in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CVSS 8.8 High
Ivanti Endpoint Manager: Improper control of dynamically managed code resources in Ivanti Endpoint Manager prior…
- Ivanti Endpoint Manager
- CWE-913
- CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Cross-site scripting in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Cross-site scripting (XSS)
- CVSS 7.1 High
Incorrect default permissions in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Broken access control
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 6.5 Medium
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Path traversal in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CVSS 7.8 High
Deserialization of untrusted data in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Insecure deserialization
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Unrestricted file upload in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Unrestricted file upload
- CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Unrestricted file upload in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Unrestricted file upload
- CVSS 7.2 High
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 8.4 High
Improper Encryption in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- CWE-257
- CVSS 8.4 High
Improper Encryption in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- CWE-257
- CVSS 8.2 High
Cross-site scripting in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Cross-site scripting in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Untrusted pointer dereference in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 7.2 High
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 4.8 Medium
Ivanti Endpoint Manager: Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or…
- Ivanti Endpoint Manager
- CWE-296
- CVSS 7.8 High
Uncontrolled search path in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- CWE-427
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 7.8 High
Deserialization of untrusted data in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Insecure deserialization
- CVSS 7.8 High
Use of uninitialized resource in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 7.8 High
Out-of-bounds read in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 7.5 High
Out-of-bounds write in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Memory corruption
- CVSS 7.8 HighCritical · CVSS 7+ and EPSS
Unrestricted file upload in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Unrestricted file upload
- CVSS 7.8 High
Improper signature verification in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Weak cryptography or TLS
- CVSS 7.2 High
Untrusted search path in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CWE-426
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Path traversal in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Path traversal in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Path traversal in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
Path traversal in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CVSS 7.1 High
Incorrect permission assignment in Ivanti Patch SDK and others
- Ivanti Patch SDK
- Ivanti Endpoint Manager
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 8.8 High
Path traversal in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal
- CVSS 7.2 High
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 7.2 High
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
SQL injection in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- SQL injection
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
Path traversal in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- Path traversal