Known vulnerabilities in Endpoint Manager - page 4

Vendor: Ivanti
Software: Endpoint Manager
Software CPE: cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 102
Public exploits: 4
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Endpoint Manager Endpoint Manager is affected by 102 known vulnerabilities: 3 critical, 20 high, 36 medium, 43 low Critical High Medium Low

Vulnerabilities (102)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100557 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-50329		 CWE-22 Medium
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-50324		 CWE-22 Medium
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100555 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-50330		 CWE-89 High
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100554 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-50323		 CWE-89 Medium
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100543 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32844		 CWE-89 Low
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100544 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32847		 CWE-89 Low
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100545 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-34780		 CWE-89 Low
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100546 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-37376		 CWE-89 Low
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100547 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-34781		 CWE-89 Low
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100542 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32841		 CWE-89 Low
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100541 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32839		 CWE-89 Low
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU100540 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-50322		 CWE-22 Medium
No
No
 2022 SU6 November Update, 2024 November Update 15.11.2024 SB20241115102
#VU97129 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32843		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97130 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32845		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32846		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97132 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32848		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97133 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-34779		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97134 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-34783		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97135 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-34785		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97125 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-37397		 CWE-611 High
Available
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108


Showing elements 61 - 80 out of 102