Advisories · Technology

Ivanti EPM.

Every CVE that names Ivanti EPM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-34784 CVE record

CVSS 7.2 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-34780 CVE record

CVSS 7.2 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-34781 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-32839 CVE record

CVSS 7.2 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-32844 CVE record

CVSS 7.2 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-34787 CVE record

CVSS 7.8 HighCritical · CVSS 7+ and EPSS

Path traversal in Ivanti EPM
- Ivanti EPM
- Path traversal
Not analysed yet 13 Nov 2024
CVE-2024-32847 CVE record

CVSS 7.2 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-34782 CVE record

CVSS 7.2 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-32841 CVE record

CVSS 7.2 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-37376 CVE record

CVSS 7.2 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 13 Nov 2024
CVE-2024-32840 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-34783 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-29847 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Deserialization of untrusted data in Ivanti EPM
- Ivanti EPM
- Insecure deserialization
Not analysed yet 12 Sept 2024
CVE-2024-34779 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-37397 CVE record

CVSS 8.2 HighCritical · CVSS 7+ and EPSS

XML external entity injection in Ivanti EPM
- Ivanti EPM
- XML external entities (XXE)
Not analysed yet 12 Sept 2024
CVE-2024-32848 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-34785 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-32843 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-32846 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-32845 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-32842 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 12 Sept 2024
CVE-2024-37381 CVE record

CVSS 8.4 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 29 Jul 2024
CVE-2024-29823 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-29827 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-29822 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-29826 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-29828 CVE record

CVSS 8.4 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-29829 CVE record

CVSS 8.4 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-29846 CVE record

CVSS 8.4 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-29830 CVE record

CVSS 8.4 High

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-22058 CVE record

CVSS 7.8 High

Heap-based buffer overflow in Ivanti EPM
- Ivanti EPM
- Memory corruption
Not analysed yet 31 May 2024
CVE-2024-29824 CVE record

CVSS 9.6 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2024-29825 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

SQL injection in Ivanti EPM
- Ivanti EPM
- SQL injection
Not analysed yet 31 May 2024
CVE-2021-44529 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Code injection in Ivanti EPM
- Ivanti EPM
- Code injection
Not analysed yet 8 Dec 2021