482 matches found
CVE-2024-13162
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848...
CVE-2024-13162
CVE-2024-13162 is an Ivanti EPM SQL injection affecting 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update. The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution due to incomplete fixes from CVE-2024-32848. Affected produc...
EUVD-2024-51388
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848...
CVE-2024-13162
SQL injection in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. This CVE addresses incomplete fixes from CVE-2024-32848...
CVE-2024-13163
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...
CVE-2024-13163
CVE-2024-13163 affects Ivanti Endpoint Manager (EPM) prior to the January 2025 security updates for 2024 and 2022 SU6. The issue is deserialization of untrusted data in EPM, enabling a remote unauthenticated attacker to achieve remote code execution, with local user interaction currently required...
CVE-2024-13163
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...
CVE-2024-13164
An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges...
CVE-2024-13164
CVE-2024-13164 affects Ivanti Endpoint Manager (EPM). The vulnerability is an uninitialized resource that allows a local authenticated attacker to escalate privileges. It is documented for EPM versions prior to the 2024 January–2025 Security Update and prior to 2022 SU6 January–2025 Security Upda...
CVE-2024-13164
An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges...
CVE-2024-13165
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-13165
CVE-2024-13165 concerns Ivanti Endpoint Manager (EPM). The connected Nessus advisories enumerate this CVE as an out-of-bounds write vulnerability that can allow a remote unauthenticated attacker to cause a denial of service. Affected products are Ivanti Endpoint Manager versions prior to the 2024...
CVE-2024-13165
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-13166
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-13166
CVE-2024-13166 concerns Ivanti Endpoint Manager (EPM). The vulnerability is an out‑of‑bounds write in EPM before the 2024 January‑2025 Security Update and the 2022 SU6 January‑2025 Security Update, allowing a remote unauthenticated attacker to cause a denial of service. Affected versions include ...
CVE-2024-13166
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-13167
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-13167
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-13167
CVE-2024-13167 describes an out-of-bounds write in Ivanti Endpoint Manager (EPM) prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update. This vulnerability allows a remote unauthenticated attacker to cause a denial of service. The affected product is Ivanti EPM (...