1451 matches found
CVE-2024-50326
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50323
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...
CVE-2024-50330
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution...
CVE-2024-50330
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution...
CVE-2024-50329
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...
CVE-2024-50329
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...
CVE-2024-50329
Ivanti Endpoint Manager (EPM) is affected by CVE-2024-50329 (path traversal leading to remote code execution). Exploitation is described as remote unauthenticated code execution with user interaction required, affecting versions prior to the 2024 November Security Update or 2022 SU6 November Secu...
CVE-2024-50328
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50328
CVE-2024-50328 describes a SQL injection vulnerability in Ivanti Endpoint Manager (EPM) prior to the 2024 November Security Update or 2022 SU6 November Security Update. The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution. According to the connec...
CVE-2024-50328
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50327
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50327
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50327
CVE-2024-50327 affects Ivanti Endpoint Manager (EPM). The vulnerability is a SQL injection that allows a remote authenticated attacker with admin privileges to achieve remote code execution on affected versions prior to the 2024 November Security Update or the 2022 SU6 November Security Update. T...
CVE-2024-50326
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50326
CVE-2024-50326 concerns Ivanti Endpoint Manager (EPM). The issue is a SQL injection that, when exploited by a remote attacker who is authenticated with admin privileges, can lead to remote code execution. Public references confirm the affected product and the root cause as SQL injection affecting...
CVE-2024-50326
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50324
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50324
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-50324
CVE-2024-50324 affects Ivanti Endpoint Manager (EPM) with a path traversal flaw that, when exploited by a remote authenticated attacker with admin privileges, leads to remote code execution. The issue is fixed in the 2024 November Security Update (EPM 2024) or 2022 SU6 November Security Update; p...
CVE-2024-50323
CVE-2024-50323 (Ivanti Endpoint Manager) is a SQL injection vulnerability in Ivanti Endpoint Manager prior to the 2024 November Security Update or 2022 SU6 November Security Update. It can allow a local unauthenticated attacker to achieve code execution, with user interaction required. Affected p...