Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager

🗓️ 23 May 2024 09:21:00Reported by The Hacker NewsType 
thn
 thn🔗 thehackernews.com👁 51 Views

Ivanti Endpoint Manager patches critical remote code execution flaw

Related
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of the Configuration Handler component in the microprogramming software for Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC allows a perpetrator to execute arbitrary code.
2 Feb 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the microprogramming software used in Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC controllers allows attackers to disclose protected information or execute arbitrary files.
20 Feb 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Ivanti EPM 2022 SU5 endpoint management software lies in its lack of measures to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary code.
27 May 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the GetDBPatchProducts function in the endpoint management software Ivanti EPM 2022 SU5 allows a hacker to execute arbitrary code.
3 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the GetLogFileRulesNameUniqueSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a attacker to execute arbitrary code.
7 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the GetLogFileRulesSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.
10 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the GetRulesetsSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.
10 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the GetVulnerabilitiesDataTable method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.
10 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the FileStoreConfig application in the Avalanche mobile device management system allows a hacker to execute arbitrary code.
10 Jun 202400:00
–bdu_fstec
BDU FSTEC		The vulnerability of the IT service management web component Ivanti Neurons for ITSM allows a malicious actor to read, modify, delete arbitrary files, and cause service failures.
10 Jun 202400:00
–bdu_fstec
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 May 2024 09:21Current
9.8High risk
Vulners AI Score9.8
CVSS 39.6
CVSS 3.18.8 - 9.9
EPSS0.71685
SSVC
ivantiendpoint managersecurity flawsremote code executionpatchessql injectionauthenticationavalanchecybersecurityneurons for itsmconnect securelocal privilege escalationgenieopen-sourcepath traversal
51