Show filters
177 Total Results
Displaying 51-60 of 177
Sort by:
Attacker Value
Unknown
CVE-2024-32843
Disclosure Date: September 12, 2024 (last updated September 13, 2024)
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
0
Attacker Value
Unknown
CVE-2024-32842
Disclosure Date: September 12, 2024 (last updated September 13, 2024)
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
0
Attacker Value
Unknown
CVE-2024-32842
Disclosure Date: September 12, 2024 (last updated September 13, 2024)
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
0
Attacker Value
Unknown
CVE-2024-32840
Disclosure Date: September 12, 2024 (last updated September 13, 2024)
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
0
Attacker Value
Unknown
CVE-2024-32840
Disclosure Date: September 12, 2024 (last updated September 13, 2024)
An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
0
Attacker Value
Unknown
CVE-2024-29847
Disclosure Date: September 12, 2024 (last updated September 13, 2024)
Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.
0
Attacker Value
Unknown
CVE-2024-8441
Disclosure Date: September 10, 2024 (last updated September 13, 2024)
An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privileges to escalate their privileges to SYSTEM.
0
Attacker Value
Unknown
CVE-2024-8322
Disclosure Date: September 10, 2024 (last updated September 13, 2024)
Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality.
0
Attacker Value
Unknown
CVE-2024-8321
Disclosure Date: September 10, 2024 (last updated September 13, 2024)
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network.
0
Attacker Value
Unknown
CVE-2024-8320
Disclosure Date: September 10, 2024 (last updated September 13, 2024)
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to spoof Network Isolation status of managed devices.
0
