Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:epmm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductEpmm (c5d9564f-a947-562e-9d7c-ee03802177b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36132 vulnerable 2026-06-08 06:39:43.716554 Details available
HIGH (8.2)
Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authentication and access sensitive resources.
Published: 2024-08-07T03:54:46.880Z
Updated: 2025-03-19T20:07:43.012Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36131 vulnerable 2026-06-08 06:39:43.716103 Details available
HIGH (8.8)
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to execute arbitrary commands on the underlying operating system of the appliance.
Published: 2024-08-07T03:54:46.888Z
Updated: 2024-08-21T17:22:15.126Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36130 vulnerable 2026-06-08 06:39:43.715504 Details available
CRITICAL (9.8)
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network to execute arbitrary commands on the underlying operating system of the appliance.
Published: 2024-08-07T03:54:47.818Z
Updated: 2025-03-13T20:10:42.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34788 vulnerable 2026-06-08 06:37:35.023794 Details available
MEDIUM (5.3)
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to access potentially sensitive information
Published: 2024-08-07T03:54:46.826Z
Updated: 2024-08-07T15:25:23.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22026 vulnerable 2026-06-08 06:29:33.343545 Details available
MEDIUM (6.7)
A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance.
Published: 2024-05-22T22:55:11.219Z
Updated: 2025-03-13T16:58:21.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46807 vulnerable 2026-06-08 06:14:23.442432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46806 vulnerable 2026-06-08 06:14:23.441789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39337 vulnerable 2026-06-08 06:09:37.078770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39335 vulnerable 2026-06-08 06:09:37.070552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35082 vulnerable 2026-06-08 06:06:26.488078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35081 vulnerable 2026-06-08 06:06:26.487625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.