Latest vulnerabilities for "ivanti endpoint manager (epm)"

BleepingComputerCISA: Recently patched Ivanti EPM flaw now actively exploited

Exploited

First published (updated )

News

BleepingComputer

Ivanti Endpoint ManagerIvanti Endpoint Manager OpenRecordSet SQL Injection Remote Code Execution Vulnerability

Risk 46

First published (updated )

Advisory

ZDI-25-235

Ivanti Endpoint ManagerZDI-25-235: Ivanti Endpoint Manager OpenRecordSet SQL Injection Remote Code Execution Vulnerability

Risk 51

First published (updated )

ZDI-CAN-25953

Ivanti Endpoint ManagerXSS

Risk 80

Severity

9.6

First published (updated )

CVE-2025-22466

Ivanti Endpoint ManagerXSS

Risk 38

Severity

6.1

First published (updated )

CVE-2025-22465

Ivanti Endpoint ManagerAn untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or…

Risk 41

Severity

6.1

First published (updated )

CVE-2025-22464

Ivanti Endpoint ManagerImproper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version…

Risk 32

Severity

4.8

First published (updated )

CVE-2025-22459

BleepingComputerCISA tags critical Ivanti EPM flaws as actively exploited in attacks

Exploited

Zeroday

First published (updated )

News

BleepingComputer

Ivanti Endpoint ManagerIvanti Endpoint Manager Patch Unrestricted File Upload Remote Code Execution Vulnerability

Risk 61

First published (updated )

Advisory

ZDI-25-114

Ivanti Endpoint ManagerZDI-25-114: Ivanti Endpoint Manager Patch Unrestricted File Upload Remote Code Execution Vulnerability

Risk 61

First published (updated )

ZDI-CAN-25312

Ivanti Endpoint ManagerZDI-25-032: Ivanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

Risk 61

First published (updated )

ZDI-CAN-25249

Ivanti Endpoint ManagerIvanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

Risk 61

First published (updated )

Advisory

ZDI-25-032

Ivanti Endpoint ManagerIvanti Endpoint Manager MyResolveEventHandler Untrusted Search Path Remote Code Execution Vulnerability

Risk 45

First published (updated )

Advisory

ZDI-25-031

Ivanti Endpoint ManagerZDI-25-031: Ivanti Endpoint Manager MyResolveEventHandler Untrusted Search Path Remote Code Execution Vulnerability

Risk 45

First published (updated )

ZDI-CAN-25209

Ivanti Endpoint ManagerIvanti Endpoint Manager Improper Input Validation AlertService Denial-of-Service Vulnerability

Risk 51

First published (updated )

Advisory

ZDI-25-038

Ivanti Endpoint ManagerZDI-25-038: Ivanti Endpoint Manager Improper Input Validation AlertService Denial-of-Service Vulnerability

Risk 51

First published (updated )

ZDI-CAN-25420

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Risk 51

First published (updated )

Advisory

ZDI-25-035

Ivanti Endpoint ManagerZDI-25-035: Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Risk 51

First published (updated )

ZDI-CAN-25417

Ivanti Endpoint ManagerIvanti Endpoint Manager updateAssetInfo SQL Injection Remote Code Execution Vulnerability

Risk 51

First published (updated )

Advisory

ZDI-25-041

Ivanti Endpoint ManagerZDI-25-041: Ivanti Endpoint Manager updateAssetInfo SQL Injection Remote Code Execution Vulnerability

Risk 51

First published (updated )

ZDI-CAN-25929

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Risk 51

First published (updated )

Advisory

ZDI-25-037

Ivanti Endpoint ManagerZDI-25-037: Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Risk 51

First published (updated )

ZDI-CAN-25419

Ivanti Endpoint ManagerIvanti Endpoint Manager DecodeBase64Object Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 61

First published (updated )

Advisory

ZDI-25-040

Ivanti Endpoint ManagerZDI-25-040: Ivanti Endpoint Manager DecodeBase64Object Deserialization of Untrusted Data Remote Code Execution Vulnerability

Risk 61

First published (updated )

ZDI-CAN-25432

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Risk 51

First published (updated )

Advisory

ZDI-25-036

Ivanti Endpoint ManagerZDI-25-036: Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Risk 47

First published (updated )

ZDI-CAN-25418

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Risk 51

First published (updated )

Advisory

ZDI-25-033

Ivanti Endpoint ManagerZDI-25-033: Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Risk 51

First published (updated )

ZDI-CAN-25415

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Type Confusion Information Disclosure Vulnerability

Risk 22

First published (updated )

Advisory

ZDI-25-034

Ivanti Endpoint ManagerZDI-25-034: Ivanti Endpoint Manager AlertService Type Confusion Information Disclosure Vulnerability

Risk 22

First published (updated )

ZDI-CAN-25416

Trending

BleepingComputerCISA: Recently patched Ivanti EPM flaw now actively exploited

Ivanti Endpoint ManagerIvanti Endpoint Manager OpenRecordSet SQL Injection Remote Code Execution Vulnerability

Ivanti Endpoint ManagerZDI-25-235: Ivanti Endpoint Manager OpenRecordSet SQL Injection Remote Code Execution Vulnerability

Ivanti Endpoint ManagerXSS

Ivanti Endpoint ManagerXSS

Don't miss critical vulnerabilities

Ivanti Endpoint ManagerAn untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or…

Ivanti Endpoint ManagerImproper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version…

BleepingComputerCISA tags critical Ivanti EPM flaws as actively exploited in attacks

Ivanti Endpoint ManagerIvanti Endpoint Manager Patch Unrestricted File Upload Remote Code Execution Vulnerability

Ivanti Endpoint ManagerZDI-25-114: Ivanti Endpoint Manager Patch Unrestricted File Upload Remote Code Execution Vulnerability

Don't miss critical vulnerabilities

Ivanti Endpoint ManagerZDI-25-032: Ivanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager HIIDriver Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager MyResolveEventHandler Untrusted Search Path Remote Code Execution Vulnerability

Ivanti Endpoint ManagerZDI-25-031: Ivanti Endpoint Manager MyResolveEventHandler Untrusted Search Path Remote Code Execution Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager Improper Input Validation AlertService Denial-of-Service Vulnerability

Don't miss critical vulnerabilities

Ivanti Endpoint ManagerZDI-25-038: Ivanti Endpoint Manager Improper Input Validation AlertService Denial-of-Service Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Ivanti Endpoint ManagerZDI-25-035: Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager updateAssetInfo SQL Injection Remote Code Execution Vulnerability

Ivanti Endpoint ManagerZDI-25-041: Ivanti Endpoint Manager updateAssetInfo SQL Injection Remote Code Execution Vulnerability

Don't miss critical vulnerabilities

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Ivanti Endpoint ManagerZDI-25-037: Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager DecodeBase64Object Deserialization of Untrusted Data Remote Code Execution Vulnerability

Ivanti Endpoint ManagerZDI-25-040: Ivanti Endpoint Manager DecodeBase64Object Deserialization of Untrusted Data Remote Code Execution Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Don't miss critical vulnerabilities

Ivanti Endpoint ManagerZDI-25-036: Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Ivanti Endpoint ManagerZDI-25-033: Ivanti Endpoint Manager AlertService Improper Input Validation Denial-of-Service Vulnerability

Ivanti Endpoint ManagerIvanti Endpoint Manager AlertService Type Confusion Information Disclosure Vulnerability

Ivanti Endpoint ManagerZDI-25-034: Ivanti Endpoint Manager AlertService Type Confusion Information Disclosure Vulnerability

Don't miss critical vulnerabilities

Company

Resources

Contact