Ivanti

Endpoint Manager

118 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-13170

  • EPSS 2.71%
  • Veröffentlicht 14.01.2025 18:15:28
  • Zuletzt bearbeitet 11.07.2025 17:34:03

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.

7.8

CVE-2024-13171

  • EPSS 17.61%
  • Veröffentlicht 14.01.2025 18:15:28
  • Zuletzt bearbeitet 11.07.2025 17:34:10

Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.

7.8

CVE-2024-13163

  • EPSS 9.21%
  • Veröffentlicht 14.01.2025 18:15:27
  • Zuletzt bearbeitet 11.07.2025 17:33:42

Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.

7.8

CVE-2024-13164

  • EPSS 0.38%
  • Veröffentlicht 14.01.2025 18:15:27
  • Zuletzt bearbeitet 11.07.2025 17:33:47

An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.

7.5

CVE-2024-13165

  • EPSS 2.64%
  • Veröffentlicht 14.01.2025 18:15:27
  • Zuletzt bearbeitet 11.07.2025 17:33:37

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.

7.5

CVE-2024-13166

  • EPSS 2.44%
  • Veröffentlicht 14.01.2025 18:15:27
  • Zuletzt bearbeitet 11.07.2025 17:33:31

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.

7.5

CVE-2024-13167

  • EPSS 2.64%
  • Veröffentlicht 14.01.2025 18:15:27
  • Zuletzt bearbeitet 11.07.2025 17:33:28

An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.

7.2

CVE-2024-13158

  • EPSS 3.47%
  • Veröffentlicht 14.01.2025 18:15:26
  • Zuletzt bearbeitet 12.08.2025 15:58:51

An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

7.5

CVE-2024-13159

Warnung Exploit
  • EPSS 99.85%
  • Veröffentlicht 14.01.2025 18:15:26
  • Zuletzt bearbeitet 24.10.2025 14:48:54

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

7.5

CVE-2024-13160

Warnung Exploit
  • EPSS 91.25%
  • Veröffentlicht 14.01.2025 18:15:26
  • Zuletzt bearbeitet 24.10.2025 14:48:51

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.