CVE-2024-50328

CVE-2024-50328 describes a SQL injection vulnerability in Ivanti Endpoint Manager (EPM) prior to the 2024 November Security Update or 2022 SU6 November Security Update. The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution. According to the connec...

CVE-2024-50327

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-50327

CVE-2024-50327 affects Ivanti Endpoint Manager (EPM). The vulnerability is a SQL injection that allows a remote authenticated attacker with admin privileges to achieve remote code execution on affected versions prior to the 2024 November Security Update or the 2022 SU6 November Security Update. T...

CVE-2024-50327

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-50326

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-50326

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-50326

CVE-2024-50326 concerns Ivanti Endpoint Manager (EPM). The issue is a SQL injection that, when exploited by a remote attacker who is authenticated with admin privileges, can lead to remote code execution. Public references confirm the affected product and the root cause as SQL injection affecting...

CVE-2024-50324

CVE-2024-50324 affects Ivanti Endpoint Manager (EPM) with a path traversal flaw that, when exploited by a remote authenticated attacker with admin privileges, leads to remote code execution. The issue is fixed in the 2024 November Security Update (EPM 2024) or 2022 SU6 November Security Update; p...

CVE-2024-50324

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-50324

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-50323

CVE-2024-50323 (Ivanti Endpoint Manager) is a SQL injection vulnerability in Ivanti Endpoint Manager prior to the 2024 November Security Update or 2022 SU6 November Security Update. It can allow a local unauthenticated attacker to achieve code execution, with user interaction required. Affected p...

CVE-2024-50323

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

CVE-2024-50323

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

CVE-2024-50322

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

CVE-2024-50322

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

CVE-2024-50322

Ivanti Endpoint Manager CVE-2024-50322 is a path-traversal vulnerability that allows a local, unauthenticated attacker to achieve code execution; exploitation requires user interaction. Affected software includes EPM before the 2024 November Security Update or 2022 SU6 November Security Update. T...

Security Advisory EPM November 2024 for EPM 2024 and EPM 2022 SU6

Update Regarding Ivanti EPM Endpoint Manager Downloads As part of our ongoing efforts to enhance your experience and streamline our processes we have migrated the software downloads from the Ivanti Community to the Ivanti License System ILS. You will continue to use your current Ivanti Single...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Endpoint Manager EPM, Ivanti Avalanche, Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Security Access Client. CISA encourages users and administrators to review the following Ivanti security advisories and apply the...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. A path traversal vulnerability exists in Ivanti Endpoint...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is an enterprise-grade endpoint management solution, mainly used for centralized management of various types of devices including Windows, MacOS, Linux, iOS/Android mobile devices, etc., to achieve unified configuration, security control and remote operation and maintenanc...