Vulnerabilities fixed in Ivanti Endpoint Manager

🗓️ 13 Sep 2024 17:00:35Reported by NCSCType

Ivanti Endpoint Manager fixes remote code execution and data access; no misuse.

Reporter	Title	Published	Views	Family All 185
GithubExploit	Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager	14 Sep 202421:51	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Ivanti Endpoint_Manager	9 May 202403:10	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Ivanti Endpoint_Manager	13 Sep 202414:02	–	githubexploit
ATTACKERKB	CVE-2024-13162	14 Jan 202518:15	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software, related to defects in the deserialization mechanism, allows a hacker to execute arbitrary code.	11 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software, related to defects in the deserialization mechanism, allows a hacker to access limited functions of the software.	17 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software is related to an uncontrolled element in the search process. This allows a malicious individual to elevate their privileges to SYSTEM level.	17 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software lies in the lack of authentication for a critical function, allowing a malicious actor to trigger a service failure.	17 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software lies in the lack of authentication for a critical function, allowing a hacker to alter the network isolation status of managed devices.	17 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software lies in the lack of protective measures for the SQL query structure, allowing a hacker to execute arbitrary code.	17 Sep 202400:00	–	bdu_fstec