https://vulnerability.circl.lu Vulnerabilities published under the CPE names of Endpoint Manager. http://www.rssboard.org/rss-specification python-feedgen en Sat, 12 Sep 2026 06:44:43 +0000 https://vulnerability.circl.lu/vuln/cve-2026-8111 SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution. SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to achieve remote code execution. https://vulnerability.circl.lu/vuln/cve-2026-8111 Tue, 12 May 2026 14:33:45 +0000 https://vulnerability.circl.lu/vuln/cve-2026-8110 Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges. Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a local authenticated attacker to escalate their privileges. https://vulnerability.circl.lu/vuln/cve-2026-8110 Tue, 12 May 2026 14:31:26 +0000 https://vulnerability.circl.lu/vuln/cve-2026-8109 An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials. An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated attacker to leak access credentials. https://vulnerability.circl.lu/vuln/cve-2026-8109 Tue, 12 May 2026 14:29:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-1603 An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data. An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data. https://vulnerability.circl.lu/vuln/cve-2026-1603 Tue, 10 Feb 2026 15:09:35 +0000 https://vulnerability.circl.lu/vuln/cve-2024-10811 Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. https://vulnerability.circl.lu/vuln/cve-2024-10811 Tue, 14 Jan 2025 16:59:32 +0000 https://vulnerability.circl.lu/vuln/cve-2024-13158 An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution. https://vulnerability.circl.lu/vuln/cve-2024-13158 Tue, 14 Jan 2025 17:13:29 +0000 https://vulnerability.circl.lu/vuln/cve-2024-13172 Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required. Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required. https://vulnerability.circl.lu/vuln/cve-2024-13172 Tue, 14 Jan 2025 17:16:17 +0000 https://vulnerability.circl.lu/vuln/cve-2024-13171 Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required. Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required. https://vulnerability.circl.lu/vuln/cve-2024-13171 Tue, 14 Jan 2025 17:16:48 +0000 https://vulnerability.circl.lu/vuln/cve-2024-13169 An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges. An out-of-bounds read in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges. https://vulnerability.circl.lu/vuln/cve-2024-13169 Tue, 14 Jan 2025 17:18:28 +0000 https://vulnerability.circl.lu/vuln/cve-2024-13164 An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges. An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges. https://vulnerability.circl.lu/vuln/cve-2024-13164 Tue, 14 Jan 2025 17:22:49 +0000