1437 matches found
CVE-2024-32839
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34780
Ivanti Endpoint Manager (EPM) is affected by CVE-2024-34780: an SQL injection flaw in EPM prior to the 2024 November Security Update or 2022 SU6 November Security Update. The vulnerability can allow a remote authenticated attacker with admin privileges to achieve remote code execution. The issue ...
CVE-2024-34782
CVE-2024-34782 is an SQL injection vulnerability in Ivanti Endpoint Manager that allows a remote authenticated attacker with admin privileges to achieve remote code execution. Affected products are Ivanti Endpoint Manager prior to the 2024 November Security Update or the 2022 SU6 November Securit...
CVE-2024-37376
Ivanti Endpoint Manager (EPM) is affected by CVE-2024-37376 (SQL injection) prior to the 2024 November Security Update or 2022 SU6 November Security Update. The vulnerability allows a remote attacker with admin privileges (and in some entries, a remote unauthenticated path traversal is documented...
CVE-2024-34784
Ivanti Endpoint Manager (EPM) 2024 and earlier versions are affected by CVE-2024-34784 due to a SQL injection that allows a remote authenticated attacker with admin privileges to achieve remote code execution. The vulnerability is reported in the Ivanti advisory and corroborated by Red Hat, NVD, ...
CVE-2024-34784
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-32847
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-32847
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34782
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34787
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...
CVE-2024-32839
Ivanti Endpoint Manager is affected by a SQL injection vulnerability (CVE-2024-32839) that exists before the 2024 November Security Update or 2022 SU6 November Security Update. The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution. Public sources ...
CVE-2024-32847
CVE-2024-32847 describes a SQL injection in Ivanti Endpoint Manager that can allow a remote authenticated attacker with admin privileges to achieve remote code execution. Public sources in the connected documents confirm the vulnerability, with Red Hat and NVD entries providing the same descripti...
CVE-2024-37376
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34780
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-32844
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34781
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34780
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-32839
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34784
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-34782
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...