Known vulnerabilities in Endpoint Manager 2024 SU3 - page 2

Vendor: Ivanti
Software: Endpoint Manager
Version: 2024 SU3
Software CPE: cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 28
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Endpoint Manager version 2024 SU3 Endpoint Manager 2024 SU3 is affected by 28 vulnerabilities: 6 high, 18 medium, 4 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117121 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62390		 CWE-89 Medium
No
No
 - 14.10.2025 SB20251014100
#VU117122 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62389		 CWE-89 Medium
No
No
 - 14.10.2025 SB20251014100
#VU117123 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62388		 CWE-89 Medium
No
No
 - 14.10.2025 SB20251014100
#VU117118 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-11623		 CWE-89 Medium
No
No
 - 14.10.2025 SB20251014100
#VU117117 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-9713		 CWE-22 High
No
No
 2024 SU4 14.10.2025 SB2025101499
#VU117116 - Deserialization of Untrusted Data
CVE-2025-11622		 CWE-502 Medium
No
No
 2024 SU4 14.10.2025 SB2025101499
#VU115019 - Unrestricted Upload of File with Dangerous Type
CVE-2025-9872		 CWE-434 High
No
No
 2022 SU8 Security Update 2, 2024 SU3 Security Update 1 09.09.2025 SB2025090961
#VU115018 - Unrestricted Upload of File with Dangerous Type
CVE-2025-9712		 CWE-434 High
No
No
 2022 SU8 Security Update 2, 2024 SU3 Security Update 1 09.09.2025 SB2025090961


Showing elements 21 - 40 out of 28