Ivanti Endpoint Manager SQL Injection Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An SQL injection vulnerability exists in Ivanti Endpoint Manager version 2020.1.1 and prior versions, which originates from the /remotecontrolauth/api/device request in LDMS/alertlog.aspx. No detailed...

CVE-2020-13769

LDMS/alertlog.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request...

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An SQL injection vulnerability exists in Ivanti Endpoint Manager version 2020.1.1 and prior versions, which originates from the /remotecontrolauth/api/device request in LDMS/alertlog.aspx. No detailed...

PT-2020-13668

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions through 2020.1 Description The issue allows SQL Injection via a "/remotecontrolauth/api/device" request. This affects the LDMS/alert log.aspx component in Ivanti Endpoint Manager. Recommendations For versions...

CVE-2020-13769: Improper Neutralization of Special Elements used in an SQL Command

LDMS/alertlog.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request...