https://vulnerability.circl.lu/product/9c3d45f0-d648-4e2c-9c1a-ea13b724e17a/recent 2026-09-12T08:23:59.219038+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Vulnerabilities published under the CPE names of Endpoint Manager. https://vulnerability.circl.lu/vuln/cve-2026-8111 2026-05-13T03:57:54.231000+00:00 SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.

SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution.

2026-05-12T14:33:45.708000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-8110 2026-05-13T03:57:53.140000+00:00 Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.

Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges.

2026-05-12T14:31:26.135000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-8109 2026-05-12T18:58:58.165000+00:00 An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.

An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials.

2026-05-12T14:29:10.500000+00:00 https://vulnerability.circl.lu/vuln/cve-2026-1603 2026-03-10T03:55:23.819000+00:00 An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.

2026-02-10T15:09:35.459000+00:00 https://vulnerability.circl.lu/vuln/cve-2024-10811 2026-02-26T19:09:29.972000+00:00 Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

2025-01-14T16:59:32.982000+00:00 https://vulnerability.circl.lu/vuln/cve-2024-13158 2026-02-26T19:09:29.804000+00:00 An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

2025-01-14T17:13:29.275000+00:00 https://vulnerability.circl.lu/vuln/cve-2024-13172 2026-02-26T19:09:29.342000+00:00 Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.

Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.

2025-01-14T17:16:17.218000+00:00 https://vulnerability.circl.lu/vuln/cve-2024-13171 2026-02-26T19:09:29.018000+00:00 Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.

Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.

2025-01-14T17:16:48.419000+00:00 https://vulnerability.circl.lu/vuln/cve-2024-13169 2026-02-26T19:09:28.733000+00:00 An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.

An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.

2025-01-14T17:18:28.069000+00:00 https://vulnerability.circl.lu/vuln/cve-2024-13164 2026-02-26T19:09:28.454000+00:00 An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.

An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.

2025-01-14T17:22:49.382000+00:00