Ivanti EPMM
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-36130 | 12.1.0.1 – < 12.1.0.1 | An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network to | CRITICAL 9.8 | 2.3 % | ||
| CVE-2024-36132 | 12.1.0.1 – < 12.1.0.1 | Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authentication and access | HIGH 8.2 | 1.2 % | ||
| CVE-2024-36131 | 12.1.0.1 – < 12.1.0.1 | An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to execute arbi | HIGH 8.8 | 2.3 % | ||
| CVE-2024-34788 | 12.1.0.1 – < 12.1.0.1 | An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to access potentially sen | MEDIUM 6.5 | 0.9 % | ||
| CVE-2024-22026 | 12.1.0.0 – < 12.1.0.0 ; 12.0.0.0 – < 12.0.0.0 ; 11.12.0.1 – < 11.12.0.1 | A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execut | MEDIUM 6.7 | 1.1 % | ||
| CVE-2023-46807 | 12.1.0.0 – < 12.1.0.0 | An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate privilege to access or | MEDIUM 6.7 | 1.1 % | ||
| CVE-2023-46806 | 12.1.0.0 – < 12.1.0.0 | An SQL Injection vulnerability in a web component of EPMM versions before 12.1.0.0 allows an authenticated user with appropriate privilege t | MEDIUM 6.7 | 1.0 % | ||
| CVE-2023-39337 | 11.10.0.0 ; 11.9.0.0 ; 11.8.0.0 | A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier t | CRITICAL 9.1 | 1.9 % | ||
| CVE-2023-39335 | 11.10.0.0 ; 11.9.0.0 ; 11.8.0.0 | A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to imp | CRITICAL 9.8 | 2.3 % | ||
| CVE-2023-35082 | 11.10 | An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resou | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2023-35081 | 11.10.0.3 – < 11.10.0.3 | A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticat | HIGH 7.2 | 64 % | KEV |