PT-2020-13668

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions through 2020.1 Description The issue allows SQL Injection via a "/remotecontrolauth/api/device" request. This affects the LDMS/alert log.aspx component in Ivanti Endpoint Manager. Recommendations For versions...

PT-2020-13672

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions through 2020.1.1 Description The issue allows for cross-site scripting XSS attacks via several API endpoints, including /LDMS/frm splitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frm splitcollapse.aspx, /LDMS/aler...