Approved changes feed: RSS · Atom

cpe:2.3:a:ivanti:endpoint_manager:2024:su3:*:*:*:*:*:*

part: a version: 2024 update: su3

VendorIvanti (40b984ad-e54c-5e1b-9aa1-2a4cd4d61129)
ProductEndpoint Manager (006063b4-e9bc-5f0c-b4e5-d80a079df021)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8111 vulnerable 2026-06-08 08:08:58.109421 Details available
HIGH (8.8)
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.
Published: 2026-05-12T14:33:45.708Z
Updated: 2026-05-13T03:57:54.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8110 vulnerable 2026-06-08 08:08:58.108165 Details available
HIGH (7.8)
Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.
Published: 2026-05-12T14:31:26.135Z
Updated: 2026-05-13T03:57:53.140Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8109 vulnerable 2026-06-08 08:08:58.102517 Details available
MEDIUM (6.5)
An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.
Published: 2026-05-12T14:29:10.500Z
Updated: 2026-05-12T18:58:58.165Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1603 vulnerable 2026-06-08 07:49:09.014446 Details available
HIGH (8.6)
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.
Published: 2026-02-10T15:09:35.459Z
Updated: 2026-03-10T03:55:23.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1602 vulnerable 2026-06-08 07:49:09.000770 Details available
MEDIUM (6.5)
SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to read arbitrary data from the database.
Published: 2026-02-10T15:07:27.198Z
Updated: 2026-02-26T15:04:12.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9713 vulnerable 2026-06-08 07:47:09.612698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62392 vulnerable 2026-06-08 07:37:29.611427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62391 vulnerable 2026-06-08 07:37:29.610719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62390 vulnerable 2026-06-08 07:37:29.609815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62389 vulnerable 2026-06-08 07:37:29.609110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62388 vulnerable 2026-06-08 07:37:29.608317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62387 vulnerable 2026-06-08 07:37:29.607631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62386 vulnerable 2026-06-08 07:37:29.607146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62385 vulnerable 2026-06-08 07:37:29.606674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62384 vulnerable 2026-06-08 07:37:29.605948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62383 vulnerable 2026-06-08 07:37:29.604054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13662 vulnerable 2026-06-08 07:06:32.427427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13661 vulnerable 2026-06-08 07:06:32.423649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13659 vulnerable 2026-06-08 07:06:32.419947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11623 vulnerable 2026-06-08 07:04:28.632019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11622 vulnerable 2026-06-08 07:04:28.630402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10918 vulnerable 2026-06-08 07:02:27.799942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10573 vulnerable 2026-06-08 07:02:27.098408 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.