Endpoint Manager vulnerabilities
87 known vulnerabilities in Endpoint Manager from Ivanti. 87 are rated high or critical, and 5 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Endpoint Manager: Deserialization of Untrusted Data
Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely.
- 7.5 High severity
endpoint_manager: Improper Restriction of XML External Entity Reference
An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022 SU4. External entity references are enabled in the XML parser configuration. Exploitation of this vulnerability can lead to file disclosure
- 7.5 High severity
Endpoint Manager: Out-of-bounds Write
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above.
- 9.8 Critical severity
A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below…
A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote code execution.
- 9.8 Critical severity
Ivanti Endpoint Manager: Deserialization of Untrusted Data
A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS (Operating System) vulnerabilities to escalate privileg
- 7.8 High severity
Ivanti Endpoint Manager: XML Injection
XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.
- 9.8 Critical severity
Ivanti Endpoint Manger: Incorrect Default Permissions
A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execute commands with elevated privileges.