Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Ivanti EPMM 12.1.0.0 Clear all filters
TI-2023-25279 CVE-2023-46806 · GHSA-7rp9-cgvf-834p

SQL injection in Ivanti EPMM

Priority LOW 34

An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database.

CVSS 3.0MEDIUM 6.7 Network High privileges No interaction EPSS 0.00972 Published 2024-05-22 Fixed in 12.1.0.0 CWE-89
TI-2023-25280 CVE-2023-46807 · GHSA-3wqm-ppwr-mjfv

SQL injection in Ivanti EPMM

Priority LOW 34

An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access or modify data in the underlying database.

CVSS 3.0MEDIUM 6.7 Network High privileges No interaction EPSS 0.01054 Published 2024-05-22 Fixed in 12.1.0.0 CWE-89