CVE-2024-13180

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to leak sensitive information. This CVE addresses incomplete fixes from CVE-2024-47011...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-13158

An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-13158

CVE-2024-13158 affects Ivanti Endpoint Manager (EPM) 2024 and 2022 SU6 prior to the January 2025 security updates, caused by an unbounded resource search path. This allows a remote authenticated attacker with admin privileges to achieve remote code execution. Affected versions include EPM 2024 an...

CVE-2024-13158

An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-13159

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13159

CVE-2024-13159: Ivanti Endpoint Manager (EPM) is affected by an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information. The issue affects EPM versions prior to the 2024 January Security Update and the 2022 SU6 January 2025 Security Update...

CVE-2024-13159

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13160

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13160

Ivanti Endpoint Manager (EPM) – CVE-2024-13160 – is an absolute path traversal vulnerability that can be exploited remotely by an unauthenticated attacker to leak sensitive information. The weakness resides in the EPM’s handling of directory paths, allowing access to unintended files. Affected pr...

CVE-2024-13160

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13161

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13161

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13161

CVE-2024-13161 concerns Ivanti Endpoint Manager (EPM) where an absolute path traversal/credential-coercion issue was reported in the GetHashForSingleFile endpoint. The NUCLEI template confirms unauthenticated access could coerce the EPM machine account credential by triggering NTLM authentication...

EUVD-2024-33593

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-10811

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-10811

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-10811

Ivanti Endpoint Manager (EPM) is affected by CVE-2024-10811, an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information. The issue is reported for EPM versions before the 2024 January Security Update and before 2022 SU6 January 2025 Securi...