EUVD-2024-51397

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Insufficient filename validation in Ivanti EPM allows remote code execution by unauthenticated attacker

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2024-13171	14 Jan 202518:15	–	attackerkb
Circl	CVE-2024-13171	14 Jan 202517:51	–	circl
CNNVD	Ivanti EPM 代码问题漏洞	14 Jan 202500:00	–	cnnvd
CNVD	Ivanti EPM Code Issue Vulnerability	23 Jan 202500:00	–	cnvd
CVE	CVE-2024-13171	14 Jan 202517:16	–	cve
Cvelist	CVE-2024-13171	14 Jan 202517:16	–	cvelist
Ivanti	Security Advisory EPM January 2025 for EPM 2024 and EPM 2022 SU6	13 Jan 202521:46	–	ivanti
Tenable Nessus	Ivanti Endpoint Manager 2022 SU6 - January 2025 Security Update	17 Jan 202500:00	–	nessus
Tenable Nessus	Ivanti Endpoint Manager 2024 - January 2025 Security Update	17 Jan 202500:00	–	nessus
NCSC	Vulnerabilities fixed in Ivanti Endpoint Manager	15 Jan 202511:59	–	ncsc

[
  {
    "enisaIdVendor": [
      {
        "id": "f0331b7a-2d0a-3555-a7cb-fa85ba20424d",
        "vendor": {
          "name": "Ivanti"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "31f93f3b-5250-358a-ba93-b9f61fb3d51e",
        "product": {
          "name": "Endpoint Manager"
        },
        "product_version": "patch: 2024 January-2025 Security Update"
      },
      {
        "id": "ec7ba014-c4af-3a9e-88b6-fcd3b99717ea",
        "product": {
          "name": "Endpoint Manager"
        },
        "product_version": "patch: 2022 SU6 January-2025 Security Update"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6

03 Oct 2025 20:07Current

9High risk

Vulners AI Score9

CVSS 3.17.8

EPSS0.35895

SSVC