Lucene search
K

6 matches found

CNVD
CNVD
added 2020/11/24 12:0 a.m.1 views

Ivanti Endpoint Manager SQL Injection Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An SQL injection vulnerability exists in Ivanti Endpoint Manager version 2020.1.1 and prior versions, which originates from the /remotecontrolauth/api/device request in LDMS/alertlog.aspx. No detailed...

8.8CVSS8.1AI score0.0584EPSS
Exploits1References1
Prion
Prion
added 2020/11/16 4:15 p.m.15 views

Design/Logic Flaw

Ivanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frmsplitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frmsplitcollapse.aspx, /LDMS/alertlog.aspx, /LDMS/ServerList.aspx, /LDMS/frmcoremainfrm.aspx, /LDMS/frmfindfrm.aspx, /LDMS/frmtaskfrm.aspx, and /LDMS/querybrowsecomp.aspx...

3.5CVSS5.2AI score0.00136EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2020/11/16 12:0 a.m.3 views

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An SQL injection vulnerability exists in Ivanti Endpoint Manager version 2020.1.1 and prior versions, which originates from the /remotecontrolauth/api/device request in LDMS/alertlog.aspx. No detailed...

8.8CVSS7.4AI score0.0584EPSS
Exploits1References3
CNNVD
CNNVD
added 2020/11/16 12:0 a.m.5 views

Ivanti Endpoint Manager Cross-Site Scripting Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager version 2020.1.1 and prior versions that originates in /LDMS/frmsplitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frmsplitcollapse.aspx, /LDMS...

5.4CVSS6.1AI score0.00136EPSS
Exploits1References3
CNNVD
CNNVD
added 2020/11/16 12:0 a.m.5 views

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An unauthorized access vulnerability exists in Ivanti Endpoint Manager version 2020.1.1 and prior versions, which originates in /ldclient/ldprov.cgi, and can be exploited by an attacker to disclose information...

5.3CVSS6AI score0.01906EPSS
Exploits1References3
OSV
OSV
added 2020/08/08 9:15 p.m.1 views

CVE-2020-15828

In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions...

6.5CVSS6.6AI score0.00003EPSS
Exploits0References2
Rows per page
Query Builder