Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:epm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductEpm (d5530f87-4bbd-5c91-a271-f5f12626b482)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37397 vulnerable 2026-06-08 06:39:47.415190 Details available
HIGH (8.2)
An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to leak API secrets.
Published: 2024-09-12T01:09:56.254Z
Updated: 2024-09-13T15:48:43.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37381 vulnerable 2026-06-08 06:39:47.354944 Details available
HIGH (8.4)
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2024 flat allows an authenticated attacker within the same network to execute arbitrary code.
Published: 2024-07-29T05:43:16.144Z
Updated: 2024-08-02T03:50:55.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37376 vulnerable 2026-06-08 06:39:47.330997 Details available
HIGH (7.2)
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2024-11-13T01:54:45.383Z
Updated: 2024-11-19T04:55:56.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34787 vulnerable 2026-06-08 06:37:35.019967 Details available
HIGH (7.8)
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required.
Published: 2024-11-13T01:54:45.416Z
Updated: 2024-11-19T04:55:48.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34785 vulnerable 2026-06-08 06:37:35.010176 Details available
CRITICAL (9.1)
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published: 2024-09-12T01:09:56.248Z
Updated: 2024-09-12T21:16:44.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34784 vulnerable 2026-06-08 06:37:35.005297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34783 vulnerable 2026-06-08 06:37:35.004654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34782 vulnerable 2026-06-08 06:37:35.004122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34781 vulnerable 2026-06-08 06:37:35.003543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34780 vulnerable 2026-06-08 06:37:35.002692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34779 vulnerable 2026-06-08 06:37:35.002027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32848 vulnerable 2026-06-08 06:37:24.152510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32847 vulnerable 2026-06-08 06:37:24.151133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32846 vulnerable 2026-06-08 06:37:24.142013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32845 vulnerable 2026-06-08 06:37:24.141032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32844 vulnerable 2026-06-08 06:37:24.139765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32843 vulnerable 2026-06-08 06:37:24.138803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32842 vulnerable 2026-06-08 06:37:24.137884 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32841 vulnerable 2026-06-08 06:37:24.136640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32840 vulnerable 2026-06-08 06:37:24.135761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32839 vulnerable 2026-06-08 06:37:24.125051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29847 vulnerable 2026-06-08 06:33:29.431591 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29846 vulnerable 2026-06-08 06:33:29.430739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29830 vulnerable 2026-06-08 06:33:29.412278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29829 vulnerable 2026-06-08 06:33:29.411458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29828 vulnerable 2026-06-08 06:33:29.410682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29827 vulnerable 2026-06-08 06:33:29.409730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29826 vulnerable 2026-06-08 06:33:29.408832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29825 vulnerable 2026-06-08 06:33:29.407928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29824 vulnerable 2026-06-08 06:33:29.407068 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29823 vulnerable 2026-06-08 06:33:29.406380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29822 vulnerable 2026-06-08 06:33:29.400274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22058 vulnerable 2026-06-08 06:29:33.526401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.