Known vulnerabilities in Endpoint Manager 2024 - page 2

Vendor: Ivanti
Software: Endpoint Manager
Version: 2024
Software CPE: cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 55
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Endpoint Manager version 2024 Endpoint Manager 2024 is affected by 55 vulnerabilities: 1 critical, 8 high, 23 medium, 23 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117120 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62392		 CWE-89 Medium
No
No
 - 14.10.2025 SB20251014100
#VU117128 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62386		 CWE-89 Medium
No
No
 - 14.10.2025 SB20251014100
#VU117129 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-62384		 CWE-89 Medium
No
No
 - 14.10.2025 SB20251014100
#VU117118 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-11623		 CWE-89 Medium
No
No
 - 14.10.2025 SB20251014100
#VU117117 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-9713		 CWE-22 High
No
No
 2024 SU4 14.10.2025 SB2025101499
#VU117116 - Deserialization of Untrusted Data
CVE-2025-11622		 CWE-502 Medium
No
No
 2024 SU4 14.10.2025 SB2025101499
#VU115019 - Unrestricted Upload of File with Dangerous Type
CVE-2025-9872		 CWE-434 High
No
No
 2022 SU8 Security Update 2, 2024 SU3 Security Update 1 09.09.2025 SB2025090961
#VU115018 - Unrestricted Upload of File with Dangerous Type
CVE-2025-9712		 CWE-434 High
No
No
 2022 SU8 Security Update 2, 2024 SU3 Security Update 1 09.09.2025 SB2025090961
#VU112534 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-7037		 CWE-89 Low
No
No
 2022 SU8 Security Update 1, 2024 SU3 08.07.2025 SB2025070872
#VU112533 - Storing Passwords in a Recoverable Format
CVE-2025-6996		 CWE-257 Low
No
No
 2022 SU8 Security Update 1, 2024 SU3 08.07.2025 SB2025070872
#VU112532 - Storing Passwords in a Recoverable Format
CVE-2025-6995		 CWE-257 Low
No
No
 2022 SU8 Security Update 1, 2024 SU3 08.07.2025 SB2025070872
#VU107173 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-22461		 CWE-89 Low
No
No
 2022 SU7, 2024 SU1 08.04.2025 SB2025040855
#VU107172 - Improper Certificate Validation
CVE-2025-22459		 CWE-295 Medium
No
No
 2022 SU7, 2024 SU1 08.04.2025 SB2025040855
#VU107171 - Untrusted Search Path
CVE-2025-22458		 CWE-426 Low
No
No
 2022 SU7, 2024 SU1 08.04.2025 SB2025040855
#VU107170 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22466		 CWE-79 Medium
No
No
 2022 SU7, 2024 SU1 08.04.2025 SB2025040855
#VU107169 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-22465		 CWE-79 Medium
No
No
 2022 SU7, 2024 SU1 08.04.2025 SB2025040855
#VU107168 - Untrusted Pointer Dereference
CVE-2025-22464		 CWE-822 Low
No
No
 2022 SU7, 2024 SU1 08.04.2025 SB2025040855
#VU101967 - Incorrect Default Permissions
CVE-2024-10256		 CWE-276 Low
No
No
 2022 SU6, 2022 SU6 November Update 27.12.2024 SB2024122759
SB2024122760
SB2024122761
and 3 more
#VU97128 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32842		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97134 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-34783		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108


Showing elements 21 - 40 out of 55