Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

TI-2024-23071 CVE-2024-34784 · GHSA-2r7c-gmrp-mxwv

SQL injection in Ivanti EPM

Priority LOW 37

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01715 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89
TI-2024-23067 CVE-2024-34780 · GHSA-m7p9-qq2j-2h4p

SQL injection in Ivanti EPM

Priority LOW 37

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01715 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89
TI-2024-23068 CVE-2024-34781 · GHSA-5g36-2x7r-j898

SQL injection in Ivanti EPM

Priority HIGH 71

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.68461 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89
TI-2024-21712 CVE-2024-32839 · GHSA-rvw7-mvc2-hwvc

SQL injection in Ivanti EPM

Priority MEDIUM 40

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03396 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89
TI-2024-21717 CVE-2024-32844 · GHSA-f97j-93hw-h78h

SQL injection in Ivanti EPM

Priority LOW 37

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01715 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89
TI-2024-21720 CVE-2024-32847 · GHSA-jxjx-p54m-47jc

SQL injection in Ivanti EPM

Priority LOW 39

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03163 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89
TI-2024-23069 CVE-2024-34782 · GHSA-952m-vgvv-fj9g

SQL injection in Ivanti EPM

Priority LOW 37

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01715 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89
TI-2024-21714 CVE-2024-32841 · GHSA-56xh-m8w2-qh6f

SQL injection in Ivanti EPM

Priority MEDIUM 40

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03396 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89
TI-2024-24884 CVE-2024-37376 · GHSA-62j5-qc8j-5cjx

SQL injection in Ivanti EPM

Priority LOW 39

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03163 Published 2024-11-13 Fixed in 2024 November Security Update, 2022 SU6 November Security Update CWE-89