Mar 10, 2025
2 new incidents, 0 with updates.
Started
- ClosedCriticalPatched
Advantive VeraCore: 2 exploited vulnerabilities (CVE-2024-57968, CVE-2025-25181)
CVE-2024-57968: Advantive VeraCore contains an unrestricted file upload vulnerability that allows a remote unauthenticated attacker to upload files to unintended folders via upload.apsx. CVE-2025-25181: Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter. Added to CISA KEV on 2025-03-10.
Advantive VeraCoreClosed Mar 10, 2025
- ClosedCriticalPatched
Ivanti Endpoint Manager (EPM): 3 exploited vulnerabilities (CVE-2024-13159, CVE-2024-13160, CVE-2024-13161)
CVE-2024-13159: Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information. CVE-2024-13160: Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information. CVE-2024-13161: Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information. Added to CISA KEV on 2025-03-10.
Ivanti Endpoint Manager (EPM)Closed Mar 10, 2025
