Ivanti EPM
Security incidents tagged Ivanti EPM. Newest first.
0 Ivanti EPM incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 750
- Longest quiet run: 750 days (Oct 3–Oct 22)
Show 2 older incidents2 older incidents
May 2024 1
PatchedIvanti Endpoint Manager (EPM) SQL Injection
Ivanti Endpoint Manager (EPM)
Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code. Added to the CISA KEV catalog on 2024-10-02.
Open incident →CVE-2024-29824
March 2024 1
PatchedIvanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody). Added to the CISA KEV catalog on 2024-03-25. CISA lists known use in ransomware campaigns. CVE-2021-44529 was assigned before 2024; the KEV listing came in 2024.
Open incident →CVE-2021-44529
