Known vulnerabilities in Endpoint Manager - page 5

Vendor: Ivanti
Software: Endpoint Manager
Software CPE: cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*
Website: https://www.ivanti.com/
Total vulnerabilities: 102
Public exploits: 4
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Endpoint Manager Endpoint Manager is affected by 102 known vulnerabilities: 3 critical, 20 high, 36 medium, 43 low Critical High Medium Low

Vulnerabilities (102)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97140 - Untrusted Search Path
CVE-2024-8441		 CWE-426 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97139 - Deserialization of Untrusted Data
CVE-2024-29847		 CWE-502 Critical
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97138 - Improper Access Control
CVE-2024-8322		 CWE-284 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97137 - Improper Authentication
CVE-2024-8321		 CWE-287 Medium
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97136 - Improper Authentication
CVE-2024-8320		 CWE-287 Medium
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97127 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32840		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97128 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-32842		 CWE-89 Low
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU97126 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-8191		 CWE-89 High
No
No
 2022 SU6, 2024 September Update 11.09.2024 SB2024091108
#VU94520 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-37381		 CWE-89 Low
No
No
 - 18.07.2024 SB2024071824
#VU89730 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29828		 CWE-89 Low
No
No
 - 22.05.2024 SB2024052218
#VU89731 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29829		 CWE-89 Low
No
No
 - 22.05.2024 SB2024052218
#VU89732 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29830		 CWE-89 Low
No
No
 - 22.05.2024 SB2024052218
#VU89733 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29846		 CWE-89 Low
No
No
 - 22.05.2024 SB2024052218
#VU89724 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29822		 CWE-89 High
No
No
 - 22.05.2024 SB2024052218
#VU89725 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29823		 CWE-89 High
No
No
 - 22.05.2024 SB2024052218
#VU89726 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29824		 CWE-89 Critical
Available
Exploited
 - 22.05.2024 SB2024052218
#VU89727 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29825		 CWE-89 High
No
No
 - 22.05.2024 SB2024052218
#VU89728 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29826		 CWE-89 High
No
No
 - 22.05.2024 SB2024052218
#VU89729 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-29827		 CWE-89 High
No
No
 - 22.05.2024 SB2024052218
#VU85012 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-39336		 CWE-89 High
No
No
 2022 SU5 05.01.2024 SB2024010510


Showing elements 81 - 100 out of 102